# Title: Phishing URL Snort3 Ruleset
# Updated: Mon, 22 Aug 2022 00:01:51 +0000
# Expires: 1 day (update frequency)
# Homepage: https://gitlab.com/curben/phishing-filter
# License: https://gitlab.com/curben/phishing-filter#license
# Source: https://www.phishtank.com/ & https://openphish.com/

# Notice: https://curben.gitlab.io/phishing-filter-mirror is moved to https://curben.gitlab.io/malware-filter
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"000000000000000000zimbra.circulosolidario.sv",nocase; classtype:attempted-recon; sid:200000001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"000003.000000000013.repl.co",nocase; classtype:attempted-recon; sid:200000002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"000054tr.wixsite.com",nocase; classtype:attempted-recon; sid:200000003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"005spk-id-online.de",nocase; classtype:attempted-recon; sid:200000004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"006spk-id-web.de",nocase; classtype:attempted-recon; sid:200000005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"009877898767809999.start.page",nocase; classtype:attempted-recon; sid:200000006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"01-spk-idserv.de",nocase; classtype:attempted-recon; sid:200000007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0150tree.xequcevusy.info",nocase; classtype:attempted-recon; sid:200000008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0310f955.sibforms.com",nocase; classtype:attempted-recon; sid:200000009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"033spk-id-web.de",nocase; classtype:attempted-recon; sid:200000010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"03829gh.byethost3.com",nocase; classtype:attempted-recon; sid:200000011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0432fiivesb1.ga",nocase; classtype:attempted-recon; sid:200000012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"08863299.sso-secure-mail0454etr.pages.dev",nocase; classtype:attempted-recon; sid:200000013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"09-fdereewdwewweeeeeeeee.ezyro.com",nocase; classtype:attempted-recon; sid:200000014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"094890-32839156.rf.gd",nocase; classtype:attempted-recon; sid:200000015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0dh1-pkg.serveuser.com",nocase; classtype:attempted-recon; sid:200000016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ffice-word-lcmsinc.myportfolio.com",nocase; classtype:attempted-recon; sid:200000017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ffice336272-0000-1010.pages.dev",nocase; classtype:attempted-recon; sid:200000018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ffice336272-0000-3311.pages.dev",nocase; classtype:attempted-recon; sid:200000019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ffice336272-0000-3338.pages.dev",nocase; classtype:attempted-recon; sid:200000020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0g09rebqe8ms76om9oaq8oemd1t066ke0j725els0lpmpclkoh54heg.siasky.net",nocase; classtype:attempted-recon; sid:200000021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0pensea.com",nocase; classtype:attempted-recon; sid:200000022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0web.pages.dev",nocase; classtype:attempted-recon; sid:200000023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1000x.finance",nocase; classtype:attempted-recon; sid:200000024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"104.129.205.92.host.secureserver.net",nocase; classtype:attempted-recon; sid:200000025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"104.168.173.244",nocase; classtype:attempted-recon; sid:200000026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"104.168.173.248",nocase; classtype:attempted-recon; sid:200000027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"10423584007000176.rf.gd",nocase; classtype:attempted-recon; sid:200000028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"104326535054541.rf.gd",nocase; classtype:attempted-recon; sid:200000029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"10e20o30u37.260mb.net",nocase; classtype:attempted-recon; sid:200000030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1111365.net",nocase; classtype:attempted-recon; sid:200000031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1111365585547384.com",nocase; classtype:attempted-recon; sid:200000032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859221.web.id",nocase; classtype:attempted-recon; sid:200000033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859222.web.id",nocase; classtype:attempted-recon; sid:200000034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859223.web.id",nocase; classtype:attempted-recon; sid:200000035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1112689753185922332.42web.io",nocase; classtype:attempted-recon; sid:200000036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859225.web.id",nocase; classtype:attempted-recon; sid:200000037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859235.web.id",nocase; classtype:attempted-recon; sid:200000038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859236.web.id",nocase; classtype:attempted-recon; sid:200000039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"12-123movies.com",nocase; classtype:attempted-recon; sid:200000040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"120901805221826-am.web.id",nocase; classtype:attempted-recon; sid:200000041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"122128965729233.rf.gd",nocase; classtype:attempted-recon; sid:200000042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1234455.entidadbancari1.repl.co",nocase; classtype:attempted-recon; sid:200000043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"12sl2sik4abd.000webhostapp.com",nocase; classtype:attempted-recon; sid:200000044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"138.197.76.152",nocase; classtype:attempted-recon; sid:200000045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1409001100.000webhostapp.com",nocase; classtype:attempted-recon; sid:200000046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"142.11.214.173",nocase; classtype:attempted-recon; sid:200000047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"143li.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"144.217.139.77",nocase; classtype:attempted-recon; sid:200000049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"149-210-143-165.colo.transip.net",nocase; classtype:attempted-recon; sid:200000050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"149.210.143.165",nocase; classtype:attempted-recon; sid:200000051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"149.56.117.104",nocase; classtype:attempted-recon; sid:200000052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"14gqb.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"14jlr.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"153in.net",nocase; classtype:attempted-recon; sid:200000055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"158q9.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"159dsdsd9ddf404464.xyz",nocase; classtype:attempted-recon; sid:200000057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"15e92.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"15eos.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"15fa6.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"15mzz.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"15p3o.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"161.35.142.2",nocase; classtype:attempted-recon; sid:200000063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1611659748350570.rf.gd",nocase; classtype:attempted-recon; sid:200000064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"162.222.215.185",nocase; classtype:attempted-recon; sid:200000065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"162.222.215.194",nocase; classtype:attempted-recon; sid:200000066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"163-1ew.pages.dev",nocase; classtype:attempted-recon; sid:200000067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"165.227.194.222",nocase; classtype:attempted-recon; sid:200000068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1659761148350570.rf.gd",nocase; classtype:attempted-recon; sid:200000069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"167.71.45.12",nocase; classtype:attempted-recon; sid:200000070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"169874.com",nocase; classtype:attempted-recon; sid:200000071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"170.239.85.85",nocase; classtype:attempted-recon; sid:200000072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"178.128.62.233.dsl.dyn.forthnet.gr",nocase; classtype:attempted-recon; sid:200000073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"179.48.65.130",nocase; classtype:attempted-recon; sid:200000074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"179.61.238.104",nocase; classtype:attempted-recon; sid:200000075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"18.133.73.116",nocase; classtype:attempted-recon; sid:200000076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"180110116028.clickfunnels.com",nocase; classtype:attempted-recon; sid:200000077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1822direklt.de",nocase; classtype:attempted-recon; sid:200000078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"186.75.130.46",nocase; classtype:attempted-recon; sid:200000079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"190854.8b.io",nocase; classtype:attempted-recon; sid:200000080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"198.148.100.124",nocase; classtype:attempted-recon; sid:200000081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"199102481445514444.42web.io",nocase; classtype:attempted-recon; sid:200000082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1and1ionos.mfs.gg",nocase; classtype:attempted-recon; sid:200000083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1contaconline1.webcindario.com",nocase; classtype:attempted-recon; sid:200000084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1e2e3f.yolasite.com",nocase; classtype:attempted-recon; sid:200000085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1inch-exchange.onrender.com",nocase; classtype:attempted-recon; sid:200000086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1inch-io-stage-app-euc1.s3-website.eu-central-1.amazonaws.com",nocase; classtype:attempted-recon; sid:200000087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1inchcoin.com",nocase; classtype:attempted-recon; sid:200000088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1inchl.pw",nocase; classtype:attempted-recon; sid:200000089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1monxt.csb.app",nocase; classtype:attempted-recon; sid:200000090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2.136.95.251",nocase; classtype:attempted-recon; sid:200000091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2.1ebrouinforma.repl.co",nocase; classtype:attempted-recon; sid:200000092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20.14.79.47",nocase; classtype:attempted-recon; sid:200000093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20.211.112.30",nocase; classtype:attempted-recon; sid:200000094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20.219.26.102",nocase; classtype:attempted-recon; sid:200000095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20.242.60.99",nocase; classtype:attempted-recon; sid:200000096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"200-119-185-156.liveblog365.com",nocase; classtype:attempted-recon; sid:200000097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20521fervercs120524.ink",nocase; classtype:attempted-recon; sid:200000098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"206.81.15.214",nocase; classtype:attempted-recon; sid:200000099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2072596754663237747300.42web.io",nocase; classtype:attempted-recon; sid:200000100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"208.82.115.230",nocase; classtype:attempted-recon; sid:200000101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2080-0513905-70520.rf.gd",nocase; classtype:attempted-recon; sid:200000102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"210.22.85.94",nocase; classtype:attempted-recon; sid:200000103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"216.118.231.59",nocase; classtype:attempted-recon; sid:200000104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"217651.8b.io",nocase; classtype:attempted-recon; sid:200000105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"21dsdtoolkit.com",nocase; classtype:attempted-recon; sid:200000106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2356456416454.hyperphp.com",nocase; classtype:attempted-recon; sid:200000107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"237a44e9-287f-41e6-b1ac-966b89d1da93.id.repl.co",nocase; classtype:attempted-recon; sid:200000108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"24611250.sibforms.com",nocase; classtype:attempted-recon; sid:200000109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"24electrician.245.mrsmartprinting.com.my.",nocase; classtype:attempted-recon; sid:200000110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"24stunden-supportde.de",nocase; classtype:attempted-recon; sid:200000111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"25411335131531354653.tk",nocase; classtype:attempted-recon; sid:200000112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"260e52cc-6e0a-458b-b9e1-7b24d838c9f6.id.repl.co",nocase; classtype:attempted-recon; sid:200000113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"28ac4ca3-60b1-49c0-98c0-c5fe5859e009.id.repl.co",nocase; classtype:attempted-recon; sid:200000114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2919b233c1ea8fde21529cd0bb040be4-dot-office-352115.uk.r.appspot.com",nocase; classtype:attempted-recon; sid:200000115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2be5a.ascriancasloucas.pt",nocase; classtype:attempted-recon; sid:200000116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2jptd005zmjv.ml",nocase; classtype:attempted-recon; sid:200000117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2n.k5wn.cheeseconnoisseur.ca",nocase; classtype:attempted-recon; sid:200000118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2wyslijpaczkeip389184.xyz",nocase; classtype:attempted-recon; sid:200000119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3.1ebrouinforma.repl.co",nocase; classtype:attempted-recon; sid:200000120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"30010c9qd5f1hh3pnst6atelkb1aidre4icf1pel85f5okaca7km8bg.siasky.net",nocase; classtype:attempted-recon; sid:200000121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3243gr9r3h2.blogspot.com",nocase; classtype:attempted-recon; sid:200000122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"32515641313215456.epizy.com",nocase; classtype:attempted-recon; sid:200000123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3298re09432.webcindario.com",nocase; classtype:attempted-recon; sid:200000124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"33iecacaadggvc74pfjjhymg6iaieq44messareal.weebly.com",nocase; classtype:attempted-recon; sid:200000125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"33oq-mailhostchiameritechnegslcpcgdnd.weebly.com",nocase; classtype:attempted-recon; sid:200000126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"34.229.95.48",nocase; classtype:attempted-recon; sid:200000127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"34.70.186.145",nocase; classtype:attempted-recon; sid:200000128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"342535125624124756.42web.io",nocase; classtype:attempted-recon; sid:200000129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"342535125624124756.rf.gd",nocase; classtype:attempted-recon; sid:200000130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"343i.org",nocase; classtype:attempted-recon; sid:200000131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"346435634634.validationss.repl.co",nocase; classtype:attempted-recon; sid:200000132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"34839783344hg5566.com",nocase; classtype:attempted-recon; sid:200000133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"35.192.38.184",nocase; classtype:attempted-recon; sid:200000134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"355164467416414.hyperphp.com",nocase; classtype:attempted-recon; sid:200000135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"365be.com.br",nocase; classtype:attempted-recon; sid:200000136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3a10a178.s6t6sj4s46tu4sys54y5.pages.dev",nocase; classtype:attempted-recon; sid:200000137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3br0u.s3cu.repl.co",nocase; classtype:attempted-recon; sid:200000138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3c5.com",nocase; classtype:attempted-recon; sid:200000139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3dw.in",nocase; classtype:attempted-recon; sid:200000140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3ff7c459-86b2-4f6d-b6b0-ba6402ef6cb0.htmlcomponentservice.com",nocase; classtype:attempted-recon; sid:200000141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3j124.csb.app",nocase; classtype:attempted-recon; sid:200000142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3zdmj4mbzy57o9r.ga",nocase; classtype:attempted-recon; sid:200000143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4.1ebrouinforma.repl.co",nocase; classtype:attempted-recon; sid:200000144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"400cgpe9ftgophh71dks1uopj54felhbrbg9iv21eagktj8435lmdp8.siasky.net",nocase; classtype:attempted-recon; sid:200000145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"405capital.com",nocase; classtype:attempted-recon; sid:200000146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"419gbmuab-d4195.conagopareimbabura.gob.ec",nocase; classtype:attempted-recon; sid:200000147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"42e2391f.sibforms.com",nocase; classtype:attempted-recon; sid:200000148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"43.153.170.211",nocase; classtype:attempted-recon; sid:200000149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"43524hh2.wixsite.com",nocase; classtype:attempted-recon; sid:200000150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"43gf948h3s.blogspot.com",nocase; classtype:attempted-recon; sid:200000151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4415514541545.hyperphp.com",nocase; classtype:attempted-recon; sid:200000152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"45.55.167.181",nocase; classtype:attempted-recon; sid:200000153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"45235er7892342t.art",nocase; classtype:attempted-recon; sid:200000154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"454145456551546.hyperphp.com",nocase; classtype:attempted-recon; sid:200000155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4581jnr8b-d4585.conagopareimbabura.gob.ec",nocase; classtype:attempted-recon; sid:200000156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"47.89.49.243",nocase; classtype:attempted-recon; sid:200000157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"48519283-86de-4ef6-9db2-7be27af47c73.htmlcomponentservice.com",nocase; classtype:attempted-recon; sid:200000158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4a8x6n48l5au5raf0.gq",nocase; classtype:attempted-recon; sid:200000159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4attwebmaillahsydb344553578attwebmaillahsydb355646654.weebly.com",nocase; classtype:attempted-recon; sid:200000160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4br.ir",nocase; classtype:attempted-recon; sid:200000161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4bx28w.csb.app",nocase; classtype:attempted-recon; sid:200000162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4e81.com",nocase; classtype:attempted-recon; sid:200000163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4g.krgu.cheeseconnoisseur.ca",nocase; classtype:attempted-recon; sid:200000164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4season.com.kh",nocase; classtype:attempted-recon; sid:200000165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4w8bmmjcw86e.clickfunnels.com",nocase; classtype:attempted-recon; sid:200000166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4xlxs1.hyperphp.com",nocase; classtype:attempted-recon; sid:200000167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"51.fi",nocase; classtype:attempted-recon; sid:200000168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"52.148.252.166",nocase; classtype:attempted-recon; sid:200000169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"52.152.239.23",nocase; classtype:attempted-recon; sid:200000170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"52.20.22.249",nocase; classtype:attempted-recon; sid:200000171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"53vzxcnk6rwp.clickfunnels.com",nocase; classtype:attempted-recon; sid:200000172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"54289993039409563.rf.gd",nocase; classtype:attempted-recon; sid:200000173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"546782d6.sibforms.com",nocase; classtype:attempted-recon; sid:200000174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"549wt515b-d5495.conagopareimbabura.gob.ec",nocase; classtype:attempted-recon; sid:200000175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"54hl91jm.xyz",nocase; classtype:attempted-recon; sid:200000176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"554325.selcdn.ru",nocase; classtype:attempted-recon; sid:200000177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5646854132103213561453.epizy.com",nocase; classtype:attempted-recon; sid:200000178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"569978vkjkhvj.blogspot.com",nocase; classtype:attempted-recon; sid:200000179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"57bd7fad-9765-4b2f-8914-83fb6db0c4c2.id.repl.co",nocase; classtype:attempted-recon; sid:200000180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5apps.vip",nocase; classtype:attempted-recon; sid:200000181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5b0f6cb9-0485-4fc7-9775-eb74bb45bbf6.htmlcomponentservice.com",nocase; classtype:attempted-recon; sid:200000182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5e-shincn.com",nocase; classtype:attempted-recon; sid:200000183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5e841ae2.srvr-cloudmail-srvr6765e7tg.pages.dev",nocase; classtype:attempted-recon; sid:200000184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5jnca-qaaaa-aaaad-qdh2q-cai.ic.fleek.co",nocase; classtype:attempted-recon; sid:200000185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5tu.eu",nocase; classtype:attempted-recon; sid:200000186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"61.216.168.149",nocase; classtype:attempted-recon; sid:200000187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"6128565463651654.42web.io",nocase; classtype:attempted-recon; sid:200000188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"61456456044241.hyperphp.com",nocase; classtype:attempted-recon; sid:200000189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"61da8ae6.6u6566hrrthsh45.pages.dev",nocase; classtype:attempted-recon; sid:200000190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"62.204.41.172",nocase; classtype:attempted-recon; sid:200000191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"636416.selcdn.ru",nocase; classtype:attempted-recon; sid:200000192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"636899.com",nocase; classtype:attempted-recon; sid:200000193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"638ca12d-ba2f-451c-8418-faf56b7de7ff.htmlcomponentservice.com",nocase; classtype:attempted-recon; sid:200000194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"6416454414621.hyperphp.com",nocase; classtype:attempted-recon; sid:200000195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"6416474165132.hyperphp.com",nocase; classtype:attempted-recon; sid:200000196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"64415646445.hyperphp.com",nocase; classtype:attempted-recon; sid:200000197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"6476927823772099930.rf.gd",nocase; classtype:attempted-recon; sid:200000198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"651646144164.hyperphp.com",nocase; classtype:attempted-recon; sid:200000199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"6516465681656.hyperphp.com",nocase; classtype:attempted-recon; sid:200000200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"65416451444544.hyperphp.com",nocase; classtype:attempted-recon; sid:200000201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"66466651454055.hyperphp.com",nocase; classtype:attempted-recon; sid:200000202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"67.225.251.204",nocase; classtype:attempted-recon; sid:200000203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"68.183.201.58",nocase; classtype:attempted-recon; sid:200000204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"68765gfdfdgd.blogspot.com",nocase; classtype:attempted-recon; sid:200000205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"68987a88-cf82-457e-b79f-539bfea23cc2.id.repl.co",nocase; classtype:attempted-recon; sid:200000206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"69830weqwq.webcindario.com",nocase; classtype:attempted-recon; sid:200000207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"69o0r.hyperphp.com",nocase; classtype:attempted-recon; sid:200000208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"6f788c22-bebd-44b0-abfd-bf889d41c2df.id.repl.co",nocase; classtype:attempted-recon; sid:200000209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"6kshx.hyperphp.com",nocase; classtype:attempted-recon; sid:200000210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"6xlxs2.hyperphp.com",nocase; classtype:attempted-recon; sid:200000211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"72356.63521.repl.co",nocase; classtype:attempted-recon; sid:200000212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"73346arg53473.reactivesuclave.repl.co",nocase; classtype:attempted-recon; sid:200000213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"745b4e1ad89467221.temporary.link",nocase; classtype:attempted-recon; sid:200000214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"74634646miryfacbauti2016.joseaguirre9.repl.co",nocase; classtype:attempted-recon; sid:200000215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"750shein.com",nocase; classtype:attempted-recon; sid:200000216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"75534377079856.ink",nocase; classtype:attempted-recon; sid:200000217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7567585662116566.42web.io",nocase; classtype:attempted-recon; sid:200000218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"757575878.67557575.repl.co",nocase; classtype:attempted-recon; sid:200000219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"764827.selcdn.ru",nocase; classtype:attempted-recon; sid:200000220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"764828.selcdn.ru",nocase; classtype:attempted-recon; sid:200000221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"78.108.89.240",nocase; classtype:attempted-recon; sid:200000222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7b631qxp.r.us-west-2.awstrack.me",nocase; classtype:attempted-recon; sid:200000223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7c576797.sibforms.com",nocase; classtype:attempted-recon; sid:200000224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7cf3fd69.sibforms.com",nocase; classtype:attempted-recon; sid:200000225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7dbe4fff.sibforms.com",nocase; classtype:attempted-recon; sid:200000226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7fusw1fl.xyz",nocase; classtype:attempted-recon; sid:200000227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7np70a2grwkcxtwjyvvmxgzq.microsoftoilne.com",nocase; classtype:attempted-recon; sid:200000228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7webabds2e6dgmp4g34count.rf.gd",nocase; classtype:attempted-recon; sid:200000229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7wr4u.csb.app",nocase; classtype:attempted-recon; sid:200000230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7x5dvh.csb.app",nocase; classtype:attempted-recon; sid:200000231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7yu3v.csb.app",nocase; classtype:attempted-recon; sid:200000232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"80-108-82-166.cable.dynamic.surfer.at",nocase; classtype:attempted-recon; sid:200000233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"80880568352345467899.rf.gd",nocase; classtype:attempted-recon; sid:200000234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"82v8b.app.link",nocase; classtype:attempted-recon; sid:200000235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"83.212.106.222",nocase; classtype:attempted-recon; sid:200000236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"858585858585.validationss.repl.co",nocase; classtype:attempted-recon; sid:200000237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"858zmzpe.hyperphp.com",nocase; classtype:attempted-recon; sid:200000238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"86a3d.ascriancasloucas.pt",nocase; classtype:attempted-recon; sid:200000239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"86tui.pbgnfxaftmuypz.workers.dev",nocase; classtype:attempted-recon; sid:200000240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"873734349834.start.page",nocase; classtype:attempted-recon; sid:200000241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"873twc.csb.app",nocase; classtype:attempted-recon; sid:200000242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"874856gal63474.advertencia7643.repl.co",nocase; classtype:attempted-recon; sid:200000243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"89888756.hostfree.pw",nocase; classtype:attempted-recon; sid:200000244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"8auahx.assertiviadoc.cloud",nocase; classtype:attempted-recon; sid:200000245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"8d7af84c.sibforms.com",nocase; classtype:attempted-recon; sid:200000246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"8dd401c2dbf4c414704450bd2b72fc89-dot-office-352115.uk.r.appspot.com",nocase; classtype:attempted-recon; sid:200000247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"8e5e875e.secb40u.repl.co",nocase; classtype:attempted-recon; sid:200000248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"9.jvemlbioja6989.workers.dev",nocase; classtype:attempted-recon; sid:200000249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"90offbags.com",nocase; classtype:attempted-recon; sid:200000250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"91.234.99.154",nocase; classtype:attempted-recon; sid:200000251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"92.204.144.8",nocase; classtype:attempted-recon; sid:200000252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"931942e0-ff38-4421-8a3d-64ce0c18ccf1.id.repl.co",nocase; classtype:attempted-recon; sid:200000253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"943151c8c3ad.godaddysites.com",nocase; classtype:attempted-recon; sid:200000254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"986821122128965729233.rf.gd",nocase; classtype:attempted-recon; sid:200000255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"9988888brou.galivs.repl.co",nocase; classtype:attempted-recon; sid:200000256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"999855ez.hyperphp.com",nocase; classtype:attempted-recon; sid:200000257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"9aac.egot.workers.dev",nocase; classtype:attempted-recon; sid:200000258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"9d62cfee-59b3-42a8-9542-4b3a32692792.htmlcomponentservice.com",nocase; classtype:attempted-recon; sid:200000259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"9ftytucsh4ph.clickfunnels.com",nocase; classtype:attempted-recon; sid:200000260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"9janewshub.com.ng",nocase; classtype:attempted-recon; sid:200000261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a.60b7ac265566e3da4341f765b2d2a73200f8f1db57b0b005a1afdc00.com",nocase; classtype:attempted-recon; sid:200000262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a.dab342ab8887461995aad393cb294948a5ce800ca279cd1027026d47.com",nocase; classtype:attempted-recon; sid:200000263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a.eddyx.workers.dev",nocase; classtype:attempted-recon; sid:200000264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a.gibsonwine.workers.dev",nocase; classtype:attempted-recon; sid:200000265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a.insecurpage.recovery-safty.workers.dev",nocase; classtype:attempted-recon; sid:200000266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a0570626.xsph.ru",nocase; classtype:attempted-recon; sid:200000267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a0707807.xsph.ru",nocase; classtype:attempted-recon; sid:200000268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a0708018.xsph.ru",nocase; classtype:attempted-recon; sid:200000269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a0709723.xsph.ru",nocase; classtype:attempted-recon; sid:200000270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a0710193.xsph.ru",nocase; classtype:attempted-recon; sid:200000271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a11egrolokalnie-shop.7311219.xyz",nocase; classtype:attempted-recon; sid:200000272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a4d3b42c.chgmar-d8y.pages.dev",nocase; classtype:attempted-recon; sid:200000273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a71843c1.mailssocloud-srvr65e5rd.pages.dev",nocase; classtype:attempted-recon; sid:200000274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a894ec7f.46t33454t4.pages.dev",nocase; classtype:attempted-recon; sid:200000275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aa.mfs.gg",nocase; classtype:attempted-recon; sid:200000276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aaa33f221bff69e7c4f0cb9ad1b3d53d-dot-office-352115.uk.r.appspot.com",nocase; classtype:attempted-recon; sid:200000277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aaa33f221bff69e7c4fecb9ad1b3d53d-dot-office-352115.uk.r.appspot.com",nocase; classtype:attempted-recon; sid:200000278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aaaa-9qg.pages.dev",nocase; classtype:attempted-recon; sid:200000279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aabbccee-86c0a.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aabbccee-86c0a.web.app",nocase; classtype:attempted-recon; sid:200000281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aaefdpmwzx.duckdns.org",nocase; classtype:attempted-recon; sid:200000282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aajkabahujanmedia.com",nocase; classtype:attempted-recon; sid:200000283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aandjstudios.com",nocase; classtype:attempted-recon; sid:200000284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aap.org.pk",nocase; classtype:attempted-recon; sid:200000285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aaphdffehg.duckdns.org",nocase; classtype:attempted-recon; sid:200000286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aarr.pages.dev",nocase; classtype:attempted-recon; sid:200000287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aarzer.co.vu",nocase; classtype:attempted-recon; sid:200000288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aave-ethereum.co",nocase; classtype:attempted-recon; sid:200000289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aavedefimax.com",nocase; classtype:attempted-recon; sid:200000290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aavelend.net",nocase; classtype:attempted-recon; sid:200000291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ab.galeish.workers.dev",nocase; classtype:attempted-recon; sid:200000292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abcprogram.co.id",nocase; classtype:attempted-recon; sid:200000293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abf.org.in",nocase; classtype:attempted-recon; sid:200000294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abncra.webcindario.com",nocase; classtype:attempted-recon; sid:200000295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abonnement.netflix.com.89-163-221-46.plesk.page",nocase; classtype:attempted-recon; sid:200000296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abpoziilrn.duckdns.org",nocase; classtype:attempted-recon; sid:200000297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"absolutepleasure.com.my",nocase; classtype:attempted-recon; sid:200000298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"absolutnoweb.eu",nocase; classtype:attempted-recon; sid:200000299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abtejhdhzk.duckdns.org",nocase; classtype:attempted-recon; sid:200000300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abvxuuwlxi.duckdns.org",nocase; classtype:attempted-recon; sid:200000301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abxg-api.iprospectdev.pl",nocase; classtype:attempted-recon; sid:200000302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"academia-rennersolucoes-portl.blogspot.com",nocase; classtype:attempted-recon; sid:200000303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acc-inf0a.tk",nocase; classtype:attempted-recon; sid:200000304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acc-orderus9514901185421-b60a94.ingress-baronn.ewp.live",nocase; classtype:attempted-recon; sid:200000305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acceso-cmr.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acceso-cmr.web.app",nocase; classtype:attempted-recon; sid:200000307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acceso.cancelarcompras-online.net",nocase; classtype:attempted-recon; sid:200000308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accesrewards.web.app",nocase; classtype:attempted-recon; sid:200000309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"access-onlineee.gq",nocase; classtype:attempted-recon; sid:200000310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accesso-asti.000webhostapp.com",nocase; classtype:attempted-recon; sid:200000311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accessreward.web.app",nocase; classtype:attempted-recon; sid:200000312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accommodationbrokenhill.com",nocase; classtype:attempted-recon; sid:200000313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"account-check.co.jp.xgpthy.top",nocase; classtype:attempted-recon; sid:200000314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"account.qualismais.odo.br",nocase; classtype:attempted-recon; sid:200000315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"account.verifications.help-page.workers.dev",nocase; classtype:attempted-recon; sid:200000316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accountproblem-secureamazonn.com",nocase; classtype:attempted-recon; sid:200000317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accountresolvesdapp.pages.dev",nocase; classtype:attempted-recon; sid:200000318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.login00.idm.ver.sul.t-online.de",nocase; classtype:attempted-recon; sid:200000319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.wenshublog.cn",nocase; classtype:attempted-recon; sid:200000320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acctcoxmail-net.preview-domain.com",nocase; classtype:attempted-recon; sid:200000321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accueil-carte.info",nocase; classtype:attempted-recon; sid:200000322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acess-ofici-fatura.blogspot.com",nocase; classtype:attempted-recon; sid:200000323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acessando-facil-solucoes.com",nocase; classtype:attempted-recon; sid:200000324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acessando-facilmente-solucoes.com",nocase; classtype:attempted-recon; sid:200000325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acessodedodemo.blogspot.com",nocase; classtype:attempted-recon; sid:200000326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acessopjbradesco.com",nocase; classtype:attempted-recon; sid:200000327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"achulemarecoa.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"achulemarecoa.web.app",nocase; classtype:attempted-recon; sid:200000329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aciermetal.com.br",nocase; classtype:attempted-recon; sid:200000330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aclvsekshf.duckdns.org",nocase; classtype:attempted-recon; sid:200000331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acn.unpbls.sprt-acn.workers.dev",nocase; classtype:attempted-recon; sid:200000332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acnscure.cnfrm.scrthlp.workers.dev",nocase; classtype:attempted-recon; sid:200000333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acocceon.aseocoeon.iwym.cc",nocase; classtype:attempted-recon; sid:200000334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acocceon.aseocoeon.xwjimg.top",nocase; classtype:attempted-recon; sid:200000335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acocceon.aseocoon.gangtiemao.cc",nocase; classtype:attempted-recon; sid:200000336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acocceon.aseocoon.ilechun.cc",nocase; classtype:attempted-recon; sid:200000337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acocceon.aseocoon.iscr.cc",nocase; classtype:attempted-recon; sid:200000338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acocceon.aseocoon.xxbjzt.top",nocase; classtype:attempted-recon; sid:200000339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acoceon.aseocon.ippq.cc",nocase; classtype:attempted-recon; sid:200000340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acoceon.aseocon.tzngly.top",nocase; classtype:attempted-recon; sid:200000341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acoceon.aseocon.uayuxc.top",nocase; classtype:attempted-recon; sid:200000342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acordion-stela.blogspot.com",nocase; classtype:attempted-recon; sid:200000343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acountandadikunci.weebly.com",nocase; classtype:attempted-recon; sid:200000344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acp-arequipa.co",nocase; classtype:attempted-recon; sid:200000345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"act-premco.hostfree.pw",nocase; classtype:attempted-recon; sid:200000346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"activacion653474698.reactiva74724di.repl.co",nocase; classtype:attempted-recon; sid:200000347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"activaciondigitaluru.reactivesuclave.repl.co",nocase; classtype:attempted-recon; sid:200000348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"activate-hulu-com-activate.sitey.me",nocase; classtype:attempted-recon; sid:200000349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"activate.segmentwizard.com",nocase; classtype:attempted-recon; sid:200000350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"activatesynmainnet.com",nocase; classtype:attempted-recon; sid:200000351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"activatiioncode.com",nocase; classtype:attempted-recon; sid:200000352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"actualizaciondatosbancolombia.netbancolombia.repl.co",nocase; classtype:attempted-recon; sid:200000353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"actualizaciondigital82.reactivesuclave.repl.co",nocase; classtype:attempted-recon; sid:200000354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acuascut.bluehoststaff.com",nocase; classtype:attempted-recon; sid:200000355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acumuleeresgate.azurewebsites.net",nocase; classtype:attempted-recon; sid:200000356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adaaifqzsq.duckdns.org",nocase; classtype:attempted-recon; sid:200000357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adaptogens.co.uk",nocase; classtype:attempted-recon; sid:200000358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adcloudserver.com",nocase; classtype:attempted-recon; sid:200000359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adept-producer-5628.ck.page",nocase; classtype:attempted-recon; sid:200000360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adfgh.uuhhh.cn",nocase; classtype:attempted-recon; sid:200000361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"admin-formserviceupdates.weeblysite.com",nocase; classtype:attempted-recon; sid:200000362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"admin-update-accoutn.ncbncb.cn",nocase; classtype:attempted-recon; sid:200000363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"admin.epochfinancialus.com",nocase; classtype:attempted-recon; sid:200000364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adobe-online-e375c.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adobemicrosoftoffice.myportfolio.com",nocase; classtype:attempted-recon; sid:200000366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adobemicrosoftonline.myportfolio.com",nocase; classtype:attempted-recon; sid:200000367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adobeofficec5c2e764c17d59ed03ed35f514778e40c5c2e764c17d59ed03ed.officepost1.workers.dev",nocase; classtype:attempted-recon; sid:200000368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adobfiles.pages.dev",nocase; classtype:attempted-recon; sid:200000369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adpunemploymentclaims.sharefile.com",nocase; classtype:attempted-recon; sid:200000370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adrestricted-help.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adrestricted-help.web.app",nocase; classtype:attempted-recon; sid:200000372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adroitjobs.com",nocase; classtype:attempted-recon; sid:200000373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adv-promote.com",nocase; classtype:attempted-recon; sid:200000374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"advancelink.easy.co",nocase; classtype:attempted-recon; sid:200000375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adveninternational.com",nocase; classtype:attempted-recon; sid:200000376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adwirepdzt.duckdns.org",nocase; classtype:attempted-recon; sid:200000377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adwyunbaql.duckdns.org",nocase; classtype:attempted-recon; sid:200000378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeeahggplu.duckdns.org",nocase; classtype:attempted-recon; sid:200000379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aejjtzduor.duckdns.org",nocase; classtype:attempted-recon; sid:200000380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aerofhgxz.co.vu",nocase; classtype:attempted-recon; sid:200000381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeropartscr.com",nocase; classtype:attempted-recon; sid:200000382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aerospacesses.com",nocase; classtype:attempted-recon; sid:200000383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aescoen.asecosoone.qrgj.com.cn",nocase; classtype:attempted-recon; sid:200000384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aescoen.asecosoone.quanshikong.cc",nocase; classtype:attempted-recon; sid:200000385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aescoen.asecosoone.ufwybn.top",nocase; classtype:attempted-recon; sid:200000386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aescoen.asecosoone.yhyyti.top",nocase; classtype:attempted-recon; sid:200000387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aescosn.aoeescocone.aifrench.net",nocase; classtype:attempted-recon; sid:200000388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aescosn.aoeescocone.efficiency.ltd",nocase; classtype:attempted-recon; sid:200000389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aescosn.aoeescocone.izzd.cc",nocase; classtype:attempted-recon; sid:200000390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aescosn.aoeescocone.ptzh.com.cn",nocase; classtype:attempted-recon; sid:200000391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aescosn.aoeescocone.wetot.red",nocase; classtype:attempted-recon; sid:200000392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aescosn.aoeescocone.wetot.work",nocase; classtype:attempted-recon; sid:200000393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aescosn.aoeescocone.zgepsq.top",nocase; classtype:attempted-recon; sid:200000394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aescosn.aoeescocone.znepgh.top",nocase; classtype:attempted-recon; sid:200000395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeseeseosioeesrcn.acsseeoieossoceneaseocseueoccesoesaccn.mp3zo.co",nocase; classtype:attempted-recon; sid:200000396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeseeseosioeoercsn.caseseieoosocensaseoceeusoccesoesecaccn.figvn.co",nocase; classtype:attempted-recon; sid:200000397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeseeseosioesercsn.caseseieoosocensaseoceeueoccesoessceacn.kfcc.co",nocase; classtype:attempted-recon; sid:200000398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeseoescn.asseosoeseesaccn.gnpais.top",nocase; classtype:attempted-recon; sid:200000399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeseseoiosecsn.asseeososceeueossceacn.gzfmft.top",nocase; classtype:attempted-recon; sid:200000400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesocen.asecosoeone.01ov.top",nocase; classtype:attempted-recon; sid:200000401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesocen.asecosoeone.ipangxin.cc",nocase; classtype:attempted-recon; sid:200000402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesocen.asecosoeone.wetot.cc",nocase; classtype:attempted-recon; sid:200000403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesocen.asecosoeone.wetot.cloud",nocase; classtype:attempted-recon; sid:200000404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesocen.asecosoeone.wetot.show",nocase; classtype:attempted-recon; sid:200000405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesocen.asecosoeone.wetot.work",nocase; classtype:attempted-recon; sid:200000406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesocen.asecosoeone.zaweli.top",nocase; classtype:attempted-recon; sid:200000407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesocen.asecosoeone.zjnkse.top",nocase; classtype:attempted-recon; sid:200000408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesocsn.aoeescoecone.00jd.top",nocase; classtype:attempted-recon; sid:200000409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesocsn.aoeescoecone.ihetao.cc",nocase; classtype:attempted-recon; sid:200000410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesocsn.aoeescoecone.ilechun.cc",nocase; classtype:attempted-recon; sid:200000411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesocsn.aoeescoecone.iyouqiu.cc",nocase; classtype:attempted-recon; sid:200000412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesocsn.aoeescoecone.wetot.work",nocase; classtype:attempted-recon; sid:200000413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoen.asecosone.ipengyou.cc",nocase; classtype:attempted-recon; sid:200000414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoen.asecosone.qrgj.com.cn",nocase; classtype:attempted-recon; sid:200000415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoen.asecosone.zjnkse.top",nocase; classtype:attempted-recon; sid:200000416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoesn.aseoseseacn.mojnlk.top",nocase; classtype:attempted-recon; sid:200000417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoesn.aseoseseacn.qxkahc.top",nocase; classtype:attempted-recon; sid:200000418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoioesn.aseoseiseaccn.pagrhw.top",nocase; classtype:attempted-recon; sid:200000419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoioesn.aseoseiseaccn.tnklun.top",nocase; classtype:attempted-recon; sid:200000420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoiosesn.aseosieesceacn.msnwrh.top",nocase; classtype:attempted-recon; sid:200000421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoiosesn.aseosieesceacn.qrajkr.top",nocase; classtype:attempted-recon; sid:200000422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoiosesn.aseosieesceacn.rkbxko.top",nocase; classtype:attempted-recon; sid:200000423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoiosesn.aseosieesceacn.sindqc.top",nocase; classtype:attempted-recon; sid:200000424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoiosesn.aseosieesceacn.ttvjrg.top",nocase; classtype:attempted-recon; sid:200000425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesooesn.aseoseseaccn.mizduc.top",nocase; classtype:attempted-recon; sid:200000426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesooesn.aseoseseaccn.oznolj.top",nocase; classtype:attempted-recon; sid:200000427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesooesn.aseoseseaccn.qcyqef.top",nocase; classtype:attempted-recon; sid:200000428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesooesn.aseoseseaccn.qmfrae.top",nocase; classtype:attempted-recon; sid:200000429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesooesn.aseoseseaccn.stjjjj.top",nocase; classtype:attempted-recon; sid:200000430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoosesn.aseoseesceacn.nyebgi.top",nocase; classtype:attempted-recon; sid:200000431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoosesn.aseoseesceacn.qdzxsq.top",nocase; classtype:attempted-recon; sid:200000432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoosesn.aseoseesceacn.sindqc.top",nocase; classtype:attempted-recon; sid:200000433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoosesn.aseoseesceacn.wjlbjw.top",nocase; classtype:attempted-recon; sid:200000434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesosesn.aseoseeseacn.nymtpr.top",nocase; classtype:attempted-recon; sid:200000435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesosesn.aseoseeseacn.qxkahc.top",nocase; classtype:attempted-recon; sid:200000436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesosn.aoeesccone.guochanhua.cc",nocase; classtype:attempted-recon; sid:200000437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesosn.aoeesccone.zaweli.top",nocase; classtype:attempted-recon; sid:200000438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aestheticsafrica.com",nocase; classtype:attempted-recon; sid:200000439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"afahtnkflk.duckdns.org",nocase; classtype:attempted-recon; sid:200000440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"afeadfgc.odoo.com",nocase; classtype:attempted-recon; sid:200000441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"affixwallet.net",nocase; classtype:attempted-recon; sid:200000442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"afmkzidzzp.duckdns.org",nocase; classtype:attempted-recon; sid:200000443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"afneaznrqd.duckdns.org",nocase; classtype:attempted-recon; sid:200000444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"afp--futuro.com",nocase; classtype:attempted-recon; sid:200000445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"afterpay.vip",nocase; classtype:attempted-recon; sid:200000446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agacnvljpw.duckdns.org",nocase; classtype:attempted-recon; sid:200000447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agbslvqopz.duckdns.org",nocase; classtype:attempted-recon; sid:200000448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agcbnntuvo.duckdns.org",nocase; classtype:attempted-recon; sid:200000449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"age.a7qy.in",nocase; classtype:attempted-recon; sid:200000450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aged-breeze-3230.on.fleek.co",nocase; classtype:attempted-recon; sid:200000451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agence-88069.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agence-88069.web.app",nocase; classtype:attempted-recon; sid:200000453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agence-wordpress-bordeaux.com",nocase; classtype:attempted-recon; sid:200000454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agencenote001.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agencenote001.web.app",nocase; classtype:attempted-recon; sid:200000456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agencenote003.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agencenote003.web.app",nocase; classtype:attempted-recon; sid:200000458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agencenote004.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agencenote004.web.app",nocase; classtype:attempted-recon; sid:200000460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agencenote005.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agencenote005.web.app",nocase; classtype:attempted-recon; sid:200000462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agencenote006.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agencenote006.web.app",nocase; classtype:attempted-recon; sid:200000464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agencenote007.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agencenote007.web.app",nocase; classtype:attempted-recon; sid:200000466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agencenote008.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agencenote008.web.app",nocase; classtype:attempted-recon; sid:200000468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agencenote009.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agencenote009.web.app",nocase; classtype:attempted-recon; sid:200000470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.bhifly75390.top",nocase; classtype:attempted-recon; sid:200000471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.bhiflyk40710.xyz",nocase; classtype:attempted-recon; sid:200000472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.bhiflyk41287.xyz",nocase; classtype:attempted-recon; sid:200000473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.bhiflyk69875.xyz",nocase; classtype:attempted-recon; sid:200000474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.bhiflyk69965.xyz",nocase; classtype:attempted-recon; sid:200000475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.bhiflyk84276.xyz",nocase; classtype:attempted-recon; sid:200000476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.bsxctmkgw.top",nocase; classtype:attempted-recon; sid:200000477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.dcgobmyh.top",nocase; classtype:attempted-recon; sid:200000478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.deutschemkgw.top",nocase; classtype:attempted-recon; sid:200000479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.dwpq985.xyz",nocase; classtype:attempted-recon; sid:200000480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.hrxymkdw.top",nocase; classtype:attempted-recon; sid:200000481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.itbitwde.top",nocase; classtype:attempted-recon; sid:200000482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.kpdgmk.top",nocase; classtype:attempted-recon; sid:200000483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agi-foundation.org",nocase; classtype:attempted-recon; sid:200000484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agilefunds.net",nocase; classtype:attempted-recon; sid:200000485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agnawxs.hyperphp.com",nocase; classtype:attempted-recon; sid:200000486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agneyanw.hyperphp.com",nocase; classtype:attempted-recon; sid:200000487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agost01me.com",nocase; classtype:attempted-recon; sid:200000488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agostodigml.com",nocase; classtype:attempted-recon; sid:200000489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agreatstaffingcompany.com",nocase; classtype:attempted-recon; sid:200000490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agri-cole-fr-t-i.web.app",nocase; classtype:attempted-recon; sid:200000491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agrimetiersmartinique.fr",nocase; classtype:attempted-recon; sid:200000492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agroblockchain.live",nocase; classtype:attempted-recon; sid:200000493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agzwhhlavr.duckdns.org",nocase; classtype:attempted-recon; sid:200000494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ahadconsultancy.com",nocase; classtype:attempted-recon; sid:200000495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ahenciatributariacuenta.page.link",nocase; classtype:attempted-recon; sid:200000496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ahoramismo.vista-it-support.com",nocase; classtype:attempted-recon; sid:200000497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aiaiclub2006.com",nocase; classtype:attempted-recon; sid:200000498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aiakpnphyu.duckdns.org",nocase; classtype:attempted-recon; sid:200000499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"air.power.livemailsupport.com",nocase; classtype:attempted-recon; sid:200000500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"airdrop-pancakeswap.info",nocase; classtype:attempted-recon; sid:200000501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"airdrop-pancakeswap.net",nocase; classtype:attempted-recon; sid:200000502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"airfreight-uk.xyz",nocase; classtype:attempted-recon; sid:200000503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aizbwbpacb.duckdns.org",nocase; classtype:attempted-recon; sid:200000504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aizik-whatsapp-firebase-clone.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ajhhsd.webnode.page",nocase; classtype:attempted-recon; sid:200000506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ajiostores.com",nocase; classtype:attempted-recon; sid:200000507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ajudacef.com",nocase; classtype:attempted-recon; sid:200000508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"akanksha3012.github.io",nocase; classtype:attempted-recon; sid:200000509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"akanmubamidele.com",nocase; classtype:attempted-recon; sid:200000510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"akemidentalspecialists.com",nocase; classtype:attempted-recon; sid:200000511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"akfytrpeiv.duckdns.org",nocase; classtype:attempted-recon; sid:200000512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aks34.github.io",nocase; classtype:attempted-recon; sid:200000513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aktualizacja.jst.pl",nocase; classtype:attempted-recon; sid:200000514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alalainsw.hyperphp.com",nocase; classtype:attempted-recon; sid:200000515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alareentading-catalog.page.tl",nocase; classtype:attempted-recon; sid:200000516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"albaraka-bank.net",nocase; classtype:attempted-recon; sid:200000517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"albel.intnet.mu",nocase; classtype:attempted-recon; sid:200000518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"albertoliviera014.outgrow.us",nocase; classtype:attempted-recon; sid:200000519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"albertomingueza.es",nocase; classtype:attempted-recon; sid:200000520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aldana.in",nocase; classtype:attempted-recon; sid:200000521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aldukheil-financial-storagedata.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aldukheil-financial-storagedata.web.app",nocase; classtype:attempted-recon; sid:200000523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alerta-accesoclientes.com",nocase; classtype:attempted-recon; sid:200000524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alerta-novobanco-movil.com",nocase; classtype:attempted-recon; sid:200000525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alertas-bancofalabella.com",nocase; classtype:attempted-recon; sid:200000526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alertasynotificacionesbancolombiacomes.actualizaciond.repl.co",nocase; classtype:attempted-recon; sid:200000527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alertaynotificaciones.bancolombiasecu.repl.co",nocase; classtype:attempted-recon; sid:200000528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alerts.department.improvement.workers.dev",nocase; classtype:attempted-recon; sid:200000529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"algotextil.com.br",nocase; classtype:attempted-recon; sid:200000530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alialinedssc.com",nocase; classtype:attempted-recon; sid:200000531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aliciabot.azurewebsites.net",nocase; classtype:attempted-recon; sid:200000532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alimentosybebidasrefrespul.com",nocase; classtype:attempted-recon; sid:200000533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alinafischer.clickfunnels.com",nocase; classtype:attempted-recon; sid:200000534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alinstante.propanofilmes.com.br",nocase; classtype:attempted-recon; sid:200000535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alinstante.tusolicitudporagosto.com",nocase; classtype:attempted-recon; sid:200000536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alitekniktools.com",nocase; classtype:attempted-recon; sid:200000537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allbrowardanimalremoval.com",nocase; classtype:attempted-recon; sid:200000538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allchainsaunthenticator.live",nocase; classtype:attempted-recon; sid:200000539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allcountylandsurveyor.com",nocase; classtype:attempted-recon; sid:200000540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allegro-oplac.e-kei.pl",nocase; classtype:attempted-recon; sid:200000541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alleqrolokalnie.pl",nocase; classtype:attempted-recon; sid:200000542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alliedschoolsahiwal.com",nocase; classtype:attempted-recon; sid:200000543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allindiatransportservices.com",nocase; classtype:attempted-recon; sid:200000544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allyoucanget.dyndns.info",nocase; classtype:attempted-recon; sid:200000545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"almarwahtanksuae.com",nocase; classtype:attempted-recon; sid:200000546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"almonard.co.in",nocase; classtype:attempted-recon; sid:200000547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"almotairy.com",nocase; classtype:attempted-recon; sid:200000548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alpey.xyz",nocase; classtype:attempted-recon; sid:200000549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alpha.radyum.app",nocase; classtype:attempted-recon; sid:200000550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alphasan.in",nocase; classtype:attempted-recon; sid:200000551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alsofft.com",nocase; classtype:attempted-recon; sid:200000552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"altecmetalltechnik-energiasolar.blogspot.com",nocase; classtype:attempted-recon; sid:200000553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alttmetpml-dcrtlmal.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alttmetpml-dcrtlmal.web.app",nocase; classtype:attempted-recon; sid:200000555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"altunhaliyikama.com.tr",nocase; classtype:attempted-recon; sid:200000556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aluproindia.com",nocase; classtype:attempted-recon; sid:200000557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amanzon.co.jp.amanzon.monster",nocase; classtype:attempted-recon; sid:200000558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amanzon.co.jp.amanzon.top",nocase; classtype:attempted-recon; sid:200000559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amanzon.co.jp.arnanzonn.shop",nocase; classtype:attempted-recon; sid:200000560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amanzon.co.jp.arnanzonn.us",nocase; classtype:attempted-recon; sid:200000561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amaozn.ywcimei.com",nocase; classtype:attempted-recon; sid:200000562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amausercard-data.pvqs23.xyz",nocase; classtype:attempted-recon; sid:200000563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon-cardupdata.kc5v6f.xyz",nocase; classtype:attempted-recon; sid:200000564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon-co.cojpcc10.top",nocase; classtype:attempted-recon; sid:200000565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon-interruption.com",nocase; classtype:attempted-recon; sid:200000566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.co.jp.jjer.cn",nocase; classtype:attempted-recon; sid:200000567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.egearaq.com",nocase; classtype:attempted-recon; sid:200000568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.jp-lh.top",nocase; classtype:attempted-recon; sid:200000569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.works.ga",nocase; classtype:attempted-recon; sid:200000570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.yourama-nszw8.top",nocase; classtype:attempted-recon; sid:200000571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazondealsnow.ml",nocase; classtype:attempted-recon; sid:200000572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazonsecuriteformulaire.fr",nocase; classtype:attempted-recon; sid:200000573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ambilchipsedekah.com",nocase; classtype:attempted-recon; sid:200000574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ambrrygen.com",nocase; classtype:attempted-recon; sid:200000575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ambrygen.care",nocase; classtype:attempted-recon; sid:200000576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amc-training.com",nocase; classtype:attempted-recon; sid:200000577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ameiie-6378829-apt-b97a30.ingress-earth.ewp.live",nocase; classtype:attempted-recon; sid:200000578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ameli-vitalerenouvellement.fr",nocase; classtype:attempted-recon; sid:200000579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amelisecu.fr",nocase; classtype:attempted-recon; sid:200000580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"americanas55.com",nocase; classtype:attempted-recon; sid:200000581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"americanshdkexpresserror.kostyaplasnvittatocom.workers.dev",nocase; classtype:attempted-recon; sid:200000582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amezingdeals.com",nocase; classtype:attempted-recon; sid:200000583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amfc-asd.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amfcu-index.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amfcu-index.web.app",nocase; classtype:attempted-recon; sid:200000586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amfcu-support.web.app",nocase; classtype:attempted-recon; sid:200000587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amidabuli.com",nocase; classtype:attempted-recon; sid:200000588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amirhameed.com",nocase; classtype:attempted-recon; sid:200000589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlllatscb.duckdns.org",nocase; classtype:attempted-recon; sid:200000590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amm-uni.com",nocase; classtype:attempted-recon; sid:200000591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amnnozou.gwvaqvs.cn",nocase; classtype:attempted-recon; sid:200000592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amosleh.com",nocase; classtype:attempted-recon; sid:200000593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amozon.aq1cm3.cn",nocase; classtype:attempted-recon; sid:200000594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amozon.co.jp.hfcrm.cn",nocase; classtype:attempted-recon; sid:200000595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amozon.ylnvqzt.cn",nocase; classtype:attempted-recon; sid:200000596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amozon.ynelywe.cn",nocase; classtype:attempted-recon; sid:200000597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amozon.ynewkwb.cn",nocase; classtype:attempted-recon; sid:200000598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amplesoulfulexponents.galicia0283.repl.co",nocase; classtype:attempted-recon; sid:200000599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ampunbanaa.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200000600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amreeth.github.io",nocase; classtype:attempted-recon; sid:200000601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amrstewardshipuganda.org",nocase; classtype:attempted-recon; sid:200000602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amsecuretenet.fr",nocase; classtype:attempted-recon; sid:200000603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amtrakaccount.com",nocase; classtype:attempted-recon; sid:200000604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anambranma.org.ng",nocase; classtype:attempted-recon; sid:200000605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anandsr-dev.github.io",nocase; classtype:attempted-recon; sid:200000606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anapolisemprego.com.br",nocase; classtype:attempted-recon; sid:200000607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anarchitecturestudio.com",nocase; classtype:attempted-recon; sid:200000608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anasathalassas.gr",nocase; classtype:attempted-recon; sid:200000609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anazon.co.jp.accountconfirmation1.info",nocase; classtype:attempted-recon; sid:200000610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anazon.co.jp.privacynotice.info",nocase; classtype:attempted-recon; sid:200000611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anbfyhtkqf.duckdns.org",nocase; classtype:attempted-recon; sid:200000612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anc-acess-global.tech",nocase; classtype:attempted-recon; sid:200000613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ancient-cloud-12a9.wdavis5428586.workers.dev",nocase; classtype:attempted-recon; sid:200000614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ancient-morning-2521.wabrestroom.workers.dev",nocase; classtype:attempted-recon; sid:200000615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ancient-voice-a281.attnetmms78.workers.dev",nocase; classtype:attempted-recon; sid:200000616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ancient.tybocas.workers.dev",nocase; classtype:attempted-recon; sid:200000617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"andalusstudio.com",nocase; classtype:attempted-recon; sid:200000618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"andersonstrategic.com.au",nocase; classtype:attempted-recon; sid:200000619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"andy.retroreplays.com",nocase; classtype:attempted-recon; sid:200000620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anesthesiaqbank.com",nocase; classtype:attempted-recon; sid:200000621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"angelafarnsworthphotography.lancemanconstruction.com",nocase; classtype:attempted-recon; sid:200000622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"angindatanglahh.martulangsore.workers.dev",nocase; classtype:attempted-recon; sid:200000623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"angusvalleystables.com",nocase; classtype:attempted-recon; sid:200000624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"animeonline2.com",nocase; classtype:attempted-recon; sid:200000625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anjalijha167.github.io",nocase; classtype:attempted-recon; sid:200000626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ankiety-konsumenckie.pl",nocase; classtype:attempted-recon; sid:200000627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anmazon.ml",nocase; classtype:attempted-recon; sid:200000628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"annmazou.esxfyng.cn",nocase; classtype:attempted-recon; sid:200000629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"annmazou.hamypda.cn",nocase; classtype:attempted-recon; sid:200000630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"annmazou.zhssnyu.cn",nocase; classtype:attempted-recon; sid:200000631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"annmazou.zrcmtdx.cn",nocase; classtype:attempted-recon; sid:200000632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"antlertrader.com",nocase; classtype:attempted-recon; sid:200000633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anzvsohzwb.duckdns.org",nocase; classtype:attempted-recon; sid:200000634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoexpedis.com",nocase; classtype:attempted-recon; sid:200000635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aolxperience.com",nocase; classtype:attempted-recon; sid:200000636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aop24-fyaaa-aaaad-qc74q-cai.ic.fleek.co",nocase; classtype:attempted-recon; sid:200000637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aosceocn.acseoosn.wetot.plus",nocase; classtype:attempted-recon; sid:200000638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aosceocn.acseoosn.ybtamg.top",nocase; classtype:attempted-recon; sid:200000639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aosceocn.acseoosn.zetkvy.top",nocase; classtype:attempted-recon; sid:200000640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoseocn.acseosn.jiazicloud.cc",nocase; classtype:attempted-recon; sid:200000641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoseocn.acseosn.qrgj.com.cn",nocase; classtype:attempted-recon; sid:200000642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoseocn.acseosn.wetot.work",nocase; classtype:attempted-recon; sid:200000643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoseocn.acseosn.ycqdte.top",nocase; classtype:attempted-recon; sid:200000644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ap-bombcrypto-ol.blogspot.com",nocase; classtype:attempted-recon; sid:200000645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ap-reactive-application.com",nocase; classtype:attempted-recon; sid:200000646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ape-club.io",nocase; classtype:attempted-recon; sid:200000647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apelive.io",nocase; classtype:attempted-recon; sid:200000648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apeomtmben.co.vu",nocase; classtype:attempted-recon; sid:200000649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apeplanetclub.com",nocase; classtype:attempted-recon; sid:200000650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apex-university.netlify.app",nocase; classtype:attempted-recon; sid:200000651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"api.51.fi",nocase; classtype:attempted-recon; sid:200000652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"api.collab-land.li",nocase; classtype:attempted-recon; sid:200000653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"api.saiisoonccard.co.jp.rydxs.top",nocase; classtype:attempted-recon; sid:200000654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"api.saissolnocard.co.jp.saisozod.top",nocase; classtype:attempted-recon; sid:200000655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apicollab.online",nocase; classtype:attempted-recon; sid:200000656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apiwhesgooe4560.page.link",nocase; classtype:attempted-recon; sid:200000657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apldfre.hyperphp.com",nocase; classtype:attempted-recon; sid:200000658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aplintec.com.mx",nocase; classtype:attempted-recon; sid:200000659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app--bombcrypto-io--acess.blogspot.com",nocase; classtype:attempted-recon; sid:200000660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-baumbach.dtqhn3ddnq-jqp3vn1ky650.p.runcloud.link",nocase; classtype:attempted-recon; sid:200000661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-baumbach.uwtma6t7re-eqg35q8kk3xn.p.runcloud.link",nocase; classtype:attempted-recon; sid:200000662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-boehm.fawmsofppq-xlm41807k3dy.p.runcloud.link",nocase; classtype:attempted-recon; sid:200000663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-bosco.dtqhn3ddnq-jqp3vn1ky650.p.runcloud.link",nocase; classtype:attempted-recon; sid:200000664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-corkry.in5znwo320-v1p3znr8g3ye.p.runcloud.link",nocase; classtype:attempted-recon; sid:200000665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-dget.ukqbzkkw1p-xlm418p023dy.p.runcloud.link",nocase; classtype:attempted-recon; sid:200000666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-erdmn.ukqbzkkw1p-xlm418p023dy.p.runcloud.link",nocase; classtype:attempted-recon; sid:200000667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-feryy.xk3ojelmme-v1p3z0q0o6ye.p.runcloud.link",nocase; classtype:attempted-recon; sid:200000668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-id6016.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-id6016.web.app",nocase; classtype:attempted-recon; sid:200000670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-ipnn.zmzkvciqo0-yjr3odykr61m.p.runcloud.link",nocase; classtype:attempted-recon; sid:200000671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-kphal.ukqbzkkw1p-xlm418p023dy.p.runcloud.link",nocase; classtype:attempted-recon; sid:200000672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-langosh.va8xille9h-jqp3vn1ky650.p.temp-site.link",nocase; classtype:attempted-recon; sid:200000673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-oinsbibit.xyz",nocase; classtype:attempted-recon; sid:200000674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-poly-g0nwebsite.blogspot.com",nocase; classtype:attempted-recon; sid:200000675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-request-required.com",nocase; classtype:attempted-recon; sid:200000676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-robel.buhfqumupz-58e60w0vn3d7.p.runcloud.link",nocase; classtype:attempted-recon; sid:200000677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-sushi-swap.com",nocase; classtype:attempted-recon; sid:200000678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-sushi-swap.com.mx",nocase; classtype:attempted-recon; sid:200000679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-umiswap.org",nocase; classtype:attempted-recon; sid:200000680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-unismap.org",nocase; classtype:attempted-recon; sid:200000681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-wallet-sync.com",nocase; classtype:attempted-recon; sid:200000682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.1inch.io",nocase; classtype:attempted-recon; sid:200000683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.assessmentgenerator.com",nocase; classtype:attempted-recon; sid:200000684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.fastsolutionsapp.com",nocase; classtype:attempted-recon; sid:200000685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.formbuilder.ai",nocase; classtype:attempted-recon; sid:200000686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.hubgdpr.com",nocase; classtype:attempted-recon; sid:200000687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.mirorfinance.com",nocase; classtype:attempted-recon; sid:200000688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.moneylinecreditcorporation.com",nocase; classtype:attempted-recon; sid:200000689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.n26.20-254-67-32.cprapid.com",nocase; classtype:attempted-recon; sid:200000690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.pncservice.workers.dev",nocase; classtype:attempted-recon; sid:200000691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.singlelink.co",nocase; classtype:attempted-recon; sid:200000692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.speedywaiver.io",nocase; classtype:attempted-recon; sid:200000693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.sugarsync.com",nocase; classtype:attempted-recon; sid:200000694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.susiswap.top",nocase; classtype:attempted-recon; sid:200000695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.swap-biswap.org",nocase; classtype:attempted-recon; sid:200000696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.waiverforever.com",nocase; classtype:attempted-recon; sid:200000697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.webwalletsauthenticate.com",nocase; classtype:attempted-recon; sid:200000698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app42.host",nocase; classtype:attempted-recon; sid:200000699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appcef2022.10001mb.com",nocase; classtype:attempted-recon; sid:200000700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appeal-check.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appeal-check.web.app",nocase; classtype:attempted-recon; sid:200000702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appl-f1nd.ws",nocase; classtype:attempted-recon; sid:200000703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"applbk-extradigital.top",nocase; classtype:attempted-recon; sid:200000704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apple-id-gb.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apple-id-gb.web.app",nocase; classtype:attempted-recon; sid:200000706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appleicloudappleid-us.preview-domain.com",nocase; classtype:attempted-recon; sid:200000707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appleid-find.com",nocase; classtype:attempted-recon; sid:200000708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"application.axisbank.co.in",nocase; classtype:attempted-recon; sid:200000709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apply-supevents.ml",nocase; classtype:attempted-recon; sid:200000710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appomattoxvirginialaws.com",nocase; classtype:attempted-recon; sid:200000711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appreter.rf.gd",nocase; classtype:attempted-recon; sid:200000712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apps-sushiswap.co",nocase; classtype:attempted-recon; sid:200000713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appsuite.currentplug.bar",nocase; classtype:attempted-recon; sid:200000714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appsync.netlify.app",nocase; classtype:attempted-recon; sid:200000715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aquarelle.es",nocase; classtype:attempted-recon; sid:200000716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aquzea.hyperphp.com",nocase; classtype:attempted-recon; sid:200000717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arabianoasis.org",nocase; classtype:attempted-recon; sid:200000718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arafathrumman.github.io",nocase; classtype:attempted-recon; sid:200000719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aramex077g.temp.swtest.ru",nocase; classtype:attempted-recon; sid:200000720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"area-clientes-actualizaciones.com",nocase; classtype:attempted-recon; sid:200000721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"areaclientibperbanca.mhac.world",nocase; classtype:attempted-recon; sid:200000722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"areapersonalewebmps.info",nocase; classtype:attempted-recon; sid:200000723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arg420.informaacion22.repl.co",nocase; classtype:attempted-recon; sid:200000724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"argetne.co.vu",nocase; classtype:attempted-recon; sid:200000725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"argxoxgenesh.com",nocase; classtype:attempted-recon; sid:200000726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ariseac.tk",nocase; classtype:attempted-recon; sid:200000727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arizmamagenesh.com",nocase; classtype:attempted-recon; sid:200000728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ark-giveaway.net",nocase; classtype:attempted-recon; sid:200000729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arlindovsky.net",nocase; classtype:attempted-recon; sid:200000730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"armieblackgenesh.com",nocase; classtype:attempted-recon; sid:200000731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arms1.s-ss.co.jp",nocase; classtype:attempted-recon; sid:200000732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"armxsaoli-b7366c.ingress-florina.ewp.live",nocase; classtype:attempted-recon; sid:200000733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arnaldolanches.blogspot.com",nocase; classtype:attempted-recon; sid:200000734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aromarmusicadanza.com",nocase; classtype:attempted-recon; sid:200000735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arre-9do.pages.dev",nocase; classtype:attempted-recon; sid:200000736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arrozsabanero.com",nocase; classtype:attempted-recon; sid:200000737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"artearredi.it",nocase; classtype:attempted-recon; sid:200000738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"artemkrivovshiola.com",nocase; classtype:attempted-recon; sid:200000739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"artepedras.com",nocase; classtype:attempted-recon; sid:200000740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arthamahotels.com",nocase; classtype:attempted-recon; sid:200000741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"artistichurtfulpayware.galiicia43.repl.co",nocase; classtype:attempted-recon; sid:200000742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"artiwqx.hyperphp.com",nocase; classtype:attempted-recon; sid:200000743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arub-service.org",nocase; classtype:attempted-recon; sid:200000744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arvestserver.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arvestserver.web.app",nocase; classtype:attempted-recon; sid:200000746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"as9192030.liveblog365.com",nocase; classtype:attempted-recon; sid:200000747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asa-q98.pages.dev",nocase; classtype:attempted-recon; sid:200000748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asdafafas214sad.ydns.eu",nocase; classtype:attempted-recon; sid:200000749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asdgjasdxadad72.ydns.eu",nocase; classtype:attempted-recon; sid:200000750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asdrewd.hostfree.pw",nocase; classtype:attempted-recon; sid:200000751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asesorinformatico.net",nocase; classtype:attempted-recon; sid:200000752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asfsdvsdsd1.tk",nocase; classtype:attempted-recon; sid:200000753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ashleymadison10.com",nocase; classtype:attempted-recon; sid:200000754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ashteadinvest.com",nocase; classtype:attempted-recon; sid:200000755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asistencia-bank.honme.repl.co",nocase; classtype:attempted-recon; sid:200000756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asjbfyqhnz.duckdns.org",nocase; classtype:attempted-recon; sid:200000757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ask-cg.ir",nocase; classtype:attempted-recon; sid:200000758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"askarmotorluaraclar.com",nocase; classtype:attempted-recon; sid:200000759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aspelec.com",nocase; classtype:attempted-recon; sid:200000760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asqyxaaptn.duckdns.org",nocase; classtype:attempted-recon; sid:200000761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"assessoriabradesco.net",nocase; classtype:attempted-recon; sid:200000762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asset-file-project.files-secret.workers.dev",nocase; classtype:attempted-recon; sid:200000763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"assets-project-cloud.reconfirmation-zip.workers.dev",nocase; classtype:attempted-recon; sid:200000764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"assistance-mail.ddnsking.com",nocase; classtype:attempted-recon; sid:200000765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"assistancepaiementsecurise.com",nocase; classtype:attempted-recon; sid:200000766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"assurance-la-banque-postale.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"assurance-la-banque-postale.web.app",nocase; classtype:attempted-recon; sid:200000768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asuka-kohsan.co.jp",nocase; classtype:attempted-recon; sid:200000769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asxsyfflfj.duckdns.org",nocase; classtype:attempted-recon; sid:200000770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"at-service.recoveryatt.workers.dev",nocase; classtype:attempted-recon; sid:200000771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"at-t-support-service1.sitey.me",nocase; classtype:attempted-recon; sid:200000772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"at-t-yahoo.sitey.me",nocase; classtype:attempted-recon; sid:200000773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"at0.srev.workers.dev",nocase; classtype:attempted-recon; sid:200000774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atendimentocliente24hrs.com",nocase; classtype:attempted-recon; sid:200000775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atharvashipping.co",nocase; classtype:attempted-recon; sid:200000776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"athensgoldandsilver.gr",nocase; classtype:attempted-recon; sid:200000777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atlanticbbd.com",nocase; classtype:attempted-recon; sid:200000778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atm-i.com",nocase; classtype:attempted-recon; sid:200000779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atnr76dxku336szy.clickfunnels.com",nocase; classtype:attempted-recon; sid:200000780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atom-iodized-teal.glitch.me",nocase; classtype:attempted-recon; sid:200000781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atomandroid.com",nocase; classtype:attempted-recon; sid:200000782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-101414.square.site",nocase; classtype:attempted-recon; sid:200000783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-104134.weeblysite.com",nocase; classtype:attempted-recon; sid:200000784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-106293.square.site",nocase; classtype:attempted-recon; sid:200000785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-108280-106162.square.site",nocase; classtype:attempted-recon; sid:200000786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-108611.weeblysite.com",nocase; classtype:attempted-recon; sid:200000787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-account.com",nocase; classtype:attempted-recon; sid:200000788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-customer-service.yolasite.com",nocase; classtype:attempted-recon; sid:200000789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-expired-4de4.att-expiredms1.workers.dev",nocase; classtype:attempted-recon; sid:200000790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-login-prodx.com",nocase; classtype:attempted-recon; sid:200000791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-verification7.yolasite.com",nocase; classtype:attempted-recon; sid:200000792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-verification8.yolasite.com",nocase; classtype:attempted-recon; sid:200000793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-yahoo-101698.weeblysite.com",nocase; classtype:attempted-recon; sid:200000794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att.con-account.workers.dev",nocase; classtype:attempted-recon; sid:200000795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att1.sitey.me",nocase; classtype:attempted-recon; sid:200000796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att101top.weebly.com",nocase; classtype:attempted-recon; sid:200000797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attacker.com",nocase; classtype:attempted-recon; sid:200000798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attcurrentllynotifi.square.site",nocase; classtype:attempted-recon; sid:200000799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attempted-info-submit.com",nocase; classtype:attempted-recon; sid:200000800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atthomelanddsl.page.link",nocase; classtype:attempted-recon; sid:200000801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attivadati2022.com",nocase; classtype:attempted-recon; sid:200000802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attsdfghjkllkjhgfd.yolasite.com",nocase; classtype:attempted-recon; sid:200000803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attserviceupdate.webflow.io",nocase; classtype:attempted-recon; sid:200000804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attzcxffclfjlggflggghjjhjljhjjhhk.weebly.com",nocase; classtype:attempted-recon; sid:200000805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atwnikequq.duckdns.org",nocase; classtype:attempted-recon; sid:200000806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-fileauthentications.pages.dev",nocase; classtype:attempted-recon; sid:200000807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au20th.adobersserl.workers.dev",nocase; classtype:attempted-recon; sid:200000808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"audience-upholstery.net",nocase; classtype:attempted-recon; sid:200000809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auftx.com",nocase; classtype:attempted-recon; sid:200000810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aui493849934324zim.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aui493849934324zim.web.app",nocase; classtype:attempted-recon; sid:200000812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aulamed.com.mx",nocase; classtype:attempted-recon; sid:200000813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aumenta.hostfree.pw",nocase; classtype:attempted-recon; sid:200000814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aumentdisp.hostfree.pw",nocase; classtype:attempted-recon; sid:200000815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aumenteseulimiterenner.com",nocase; classtype:attempted-recon; sid:200000816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aumento-web.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aumento-web.web.app",nocase; classtype:attempted-recon; sid:200000818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aumentocupo20221.hostfree.pw",nocase; classtype:attempted-recon; sid:200000819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aumentocupotuya.hostfree.pw",nocase; classtype:attempted-recon; sid:200000820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aunment.hostfree.pw",nocase; classtype:attempted-recon; sid:200000821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auraschoolpmna.com",nocase; classtype:attempted-recon; sid:200000822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ausps.cf",nocase; classtype:attempted-recon; sid:200000823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"austinl33.github.io",nocase; classtype:attempted-recon; sid:200000824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aut-jil-f7dd.dmarce.workers.dev",nocase; classtype:attempted-recon; sid:200000825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autaxeddoak.com",nocase; classtype:attempted-recon; sid:200000826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auth-aib-helpdesk.com",nocase; classtype:attempted-recon; sid:200000827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auth-document-shared.datingg-voice.workers.dev",nocase; classtype:attempted-recon; sid:200000828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auth-login-user.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auth-login-user.web.app",nocase; classtype:attempted-recon; sid:200000830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auth-task1-m.web.app",nocase; classtype:attempted-recon; sid:200000831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auth-web2fa.dvrlists.com",nocase; classtype:attempted-recon; sid:200000832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auth.secure-bigpond.workers.dev",nocase; classtype:attempted-recon; sid:200000833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auth0sharefid0000000200000ff1ce009id31d2bb9c.auth0rizesharedo.workers.dev",nocase; classtype:attempted-recon; sid:200000834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authamf.web.app",nocase; classtype:attempted-recon; sid:200000835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authentic-715e0.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticate-0oxsoxauthe.pages.dev",nocase; classtype:attempted-recon; sid:200000837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticate-login-user.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticate-login-user.web.app",nocase; classtype:attempted-recon; sid:200000839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authentificationpaiement-servicesecurise.ru",nocase; classtype:attempted-recon; sid:200000840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authorise-payee.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authorise-payee.web.app",nocase; classtype:attempted-recon; sid:200000842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authprogrammingrebrandwsxdswd.xyz",nocase; classtype:attempted-recon; sid:200000843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authstandby.com",nocase; classtype:attempted-recon; sid:200000844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authuxeehmutconjxmailssocl.web.app",nocase; classtype:attempted-recon; sid:200000845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autodiscover.ryder-dutton.co.uk",nocase; classtype:attempted-recon; sid:200000846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autofixbug.site",nocase; classtype:attempted-recon; sid:200000847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autohauspodcast.de",nocase; classtype:attempted-recon; sid:200000848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autoranplususeremailprocessingupdate.pages.dev",nocase; classtype:attempted-recon; sid:200000849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autorectifytoken.rf.gd",nocase; classtype:attempted-recon; sid:200000850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autoscurt24.de",nocase; classtype:attempted-recon; sid:200000851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autoservis-vucic.com",nocase; classtype:attempted-recon; sid:200000852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autumn-bonus-2541.flexloop5423240.workers.dev",nocase; classtype:attempted-recon; sid:200000853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autumn-sun-4a21.paqesads-scure.workers.dev",nocase; classtype:attempted-recon; sid:200000854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auxiliosocial.top",nocase; classtype:attempted-recon; sid:200000855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auxxxxxxxxx.smb.page",nocase; classtype:attempted-recon; sid:200000856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auzsxtxsre.duckdns.org",nocase; classtype:attempted-recon; sid:200000857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"avantilovekc.com",nocase; classtype:attempted-recon; sid:200000858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"avatech.co.ke",nocase; classtype:attempted-recon; sid:200000859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"avisaboneee.blogspot.com",nocase; classtype:attempted-recon; sid:200000860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"awemnzsa.co.vu",nocase; classtype:attempted-recon; sid:200000861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"awesome-leaders.com",nocase; classtype:attempted-recon; sid:200000862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"awj7w-gyaaa-aaaad-qdcdq-cai.ic.fleek.co",nocase; classtype:attempted-recon; sid:200000863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"awsar1-b96acb.ingress-comporellon.ewp.live",nocase; classtype:attempted-recon; sid:200000864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ax6do-xqaaa-aaaad-qdjsq-cai.raw.ic0.app",nocase; classtype:attempted-recon; sid:200000865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axia-land.blogspot.com",nocase; classtype:attempted-recon; sid:200000866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axie-infinity.ru",nocase; classtype:attempted-recon; sid:200000867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axie-land-page.blogspot.com",nocase; classtype:attempted-recon; sid:200000868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axieinfinily.net",nocase; classtype:attempted-recon; sid:200000869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axieinfinity.simt.ind.in",nocase; classtype:attempted-recon; sid:200000870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axienfinity.io",nocase; classtype:attempted-recon; sid:200000871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axienft.top",nocase; classtype:attempted-recon; sid:200000872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axiinninfinityp.com",nocase; classtype:attempted-recon; sid:200000873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axjalnfinjty.com",nocase; classtype:attempted-recon; sid:200000874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axlujnflnjty.com",nocase; classtype:attempted-recon; sid:200000875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axlulnflnlty.com",nocase; classtype:attempted-recon; sid:200000876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ayjbcocona.duckdns.org",nocase; classtype:attempted-recon; sid:200000877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aysenurbozdogan.av.tr",nocase; classtype:attempted-recon; sid:200000878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ayutandrealove.liveblog365.com",nocase; classtype:attempted-recon; sid:200000879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azemqfovni.duckdns.org",nocase; classtype:attempted-recon; sid:200000880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azizi-developments.com",nocase; classtype:attempted-recon; sid:200000881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azo.nb1yp96.cn",nocase; classtype:attempted-recon; sid:200000882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azo.o6vsbm7.cn",nocase; classtype:attempted-recon; sid:200000883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azqpom.hyperphp.com",nocase; classtype:attempted-recon; sid:200000884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azuki-110716005.vercel.app",nocase; classtype:attempted-recon; sid:200000885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azuki-mint-connect.web.app",nocase; classtype:attempted-recon; sid:200000886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azuki.beforehand-wints.com",nocase; classtype:attempted-recon; sid:200000887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azuki.com.co",nocase; classtype:attempted-recon; sid:200000888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b-per-info.preview-domain.com",nocase; classtype:attempted-recon; sid:200000889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b.bancolombia5.repl.co",nocase; classtype:attempted-recon; sid:200000890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b.com.0cdb6084fc320a42a6418192753f5960.laremolonarestaurante.com",nocase; classtype:attempted-recon; sid:200000891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b059c86968a6427389952025bcee9886.svc.dynamics.com",nocase; classtype:attempted-recon; sid:200000892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b2bxenz.com",nocase; classtype:attempted-recon; sid:200000893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b4e921f0.sso-mailsrvr-4344e5teed.pages.dev",nocase; classtype:attempted-recon; sid:200000894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b97bca39.srvr-cloudmail-srvr6754e5rte.pages.dev",nocase; classtype:attempted-recon; sid:200000895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baanofamericase8.hostfree.pw",nocase; classtype:attempted-recon; sid:200000896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baby-swap.blogspot.com",nocase; classtype:attempted-recon; sid:200000897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"babyghost.pics",nocase; classtype:attempted-recon; sid:200000898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.b2bxmkgw.top",nocase; classtype:attempted-recon; sid:200000899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bahif9042.xyz",nocase; classtype:attempted-recon; sid:200000900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhifly75390.top",nocase; classtype:attempted-recon; sid:200000901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk36637.xyz",nocase; classtype:attempted-recon; sid:200000902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk40943.xyz",nocase; classtype:attempted-recon; sid:200000903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk42562.xyz",nocase; classtype:attempted-recon; sid:200000904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk48573.xyz",nocase; classtype:attempted-recon; sid:200000905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk63663.xyz",nocase; classtype:attempted-recon; sid:200000906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk64168.xyz",nocase; classtype:attempted-recon; sid:200000907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk84276.xyz",nocase; classtype:attempted-recon; sid:200000908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.boursobmyh.top",nocase; classtype:attempted-recon; sid:200000909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.cfhrjfw.top",nocase; classtype:attempted-recon; sid:200000910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.coppermkdw.top",nocase; classtype:attempted-recon; sid:200000911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.cwgtmkgw.top",nocase; classtype:attempted-recon; sid:200000912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.dcgobmyh.top",nocase; classtype:attempted-recon; sid:200000913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bacpayee.contactin.bio",nocase; classtype:attempted-recon; sid:200000914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bacredomatic.webcindario.com",nocase; classtype:attempted-recon; sid:200000915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"badaso-staging.uatech.co.id",nocase; classtype:attempted-recon; sid:200000916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baddseeopj.duckdns.org",nocase; classtype:attempted-recon; sid:200000917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeiazy3ak4k63jaal2dwl4ec4dyk4jf42c6lllpokzwwevvqa6ff4zy.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200000918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeibbtgciqnm6pqlscopyh556im5rqvwarla6voi4n7okpx6ai3aeci.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200000919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeibnc6hfsxs3mc3gsvxdjxu4jz2vfmzp357br2rqjglsk5y33r4y3u.ipfs.4everland.io",nocase; classtype:attempted-recon; sid:200000920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeibtelx6jvtguaym3jmnffho6qudiavvb6x2kshe5beb2k5nwp55ie.ipfs.cf-ipfs.com",nocase; classtype:attempted-recon; sid:200000921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeibwteteysxljum4owlusptthmqqik3h6r3tce7sx23duelarphxgu.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200000922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeido6vh4dyv2qyut3qhm5cmfgcy3vrszc5rtqfeqxusrjbfr7wyyry.ipfs.4everland.io",nocase; classtype:attempted-recon; sid:200000923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeidrh56vohkluey3kp3firhbnvl2vutctx5cgdnjnipjj4sgyfs5vq.ipfs.infura-ipfs.io",nocase; classtype:attempted-recon; sid:200000924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeiexhhfrj2e7perd5epep3mogqk3go2zlalrl6ftuttuxunh7hhlf4.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200000925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeifhsjjusavaqlm3dbhe2tpkwv4hfynw3hulvrccrl6kyh3tr5qpbi.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200000926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeiflm6llie7djnhp5hhnr64vnfwr36ts4g2jsawyx4zrzrdemdfj7a.ipfs.4everland.io",nocase; classtype:attempted-recon; sid:200000927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeihwqgsiib3farmchcqmdvcm5s2sg25jh3rjgaurart6nxcgvhxbau.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200000928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bahjtaprgs.duckdns.org",nocase; classtype:attempted-recon; sid:200000929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bakhai.vn",nocase; classtype:attempted-recon; sid:200000930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"balanced-emerald-candle.glitch.me",nocase; classtype:attempted-recon; sid:200000931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baleariclifestyle.be",nocase; classtype:attempted-recon; sid:200000932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banacionetmes003.webcindario.com",nocase; classtype:attempted-recon; sid:200000933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banbifemprsas.com",nocase; classtype:attempted-recon; sid:200000934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banc0naciona1.webcindario.com",nocase; classtype:attempted-recon; sid:200000935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banca-electronica1.odoo.com",nocase; classtype:attempted-recon; sid:200000936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banca-sella.me",nocase; classtype:attempted-recon; sid:200000937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancabrou.bancabrou.repl.co",nocase; classtype:attempted-recon; sid:200000938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaenlinea244.bancoactivacion.repl.co",nocase; classtype:attempted-recon; sid:200000939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancagalicia.onlinebanking88.repl.co",nocase; classtype:attempted-recon; sid:200000940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancainterbankapp-prestamo-pe.web.app",nocase; classtype:attempted-recon; sid:200000941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancanetco.bancanetco.repl.co",nocase; classtype:attempted-recon; sid:200000942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporinternet.interbak.pe.softjonub.ir",nocase; classtype:attempted-recon; sid:200000943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.aaabestratesmoving.com",nocase; classtype:attempted-recon; sid:200000944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.danielaalmeida.com",nocase; classtype:attempted-recon; sid:200000945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.fannysigns.com",nocase; classtype:attempted-recon; sid:200000946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancas.virtuallpersona.repl.co",nocase; classtype:attempted-recon; sid:200000947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancnacion4l.webcindario.com",nocase; classtype:attempted-recon; sid:200000948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banco-galicia.cuentainnactiva.repl.co",nocase; classtype:attempted-recon; sid:200000949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banco-republica-ebrou.ebrouteinforma1.repl.co",nocase; classtype:attempted-recon; sid:200000950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banco-republica-ebrou.entrarbanco3.repl.co",nocase; classtype:attempted-recon; sid:200000951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banco-republica-ebrou.uruentrar3.repl.co",nocase; classtype:attempted-recon; sid:200000952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancodobrasil.ethicspoint.eu",nocase; classtype:attempted-recon; sid:200000953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancoebrou.bancoqwi.repl.co",nocase; classtype:attempted-recon; sid:200000954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancofalabella.com.co.mulife.com.my",nocase; classtype:attempted-recon; sid:200000955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancolcaso.bancolcaso.repl.co",nocase; classtype:attempted-recon; sid:200000956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancolocaso.bancolocaso.repl.co",nocase; classtype:attempted-recon; sid:200000957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancolombia.notifica.repl.co",nocase; classtype:attempted-recon; sid:200000958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancolombia.sucursalvirtua.repl.co",nocase; classtype:attempted-recon; sid:200000959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancolombia00.bancolombia00.repl.co",nocase; classtype:attempted-recon; sid:200000960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancolombianet.bancolombianet.repl.co",nocase; classtype:attempted-recon; sid:200000961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancolombiaverify.cuentaverificad.repl.co",nocase; classtype:attempted-recon; sid:200000962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancolonpersonas1.bancolonbbizp.repl.co",nocase; classtype:attempted-recon; sid:200000963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banconacional01.webcindario.com",nocase; classtype:attempted-recon; sid:200000964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banconacional040.ultimatefreehost.in",nocase; classtype:attempted-recon; sid:200000965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banconacional1.webcindario.com",nocase; classtype:attempted-recon; sid:200000966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banconacional796.webcindario.com",nocase; classtype:attempted-recon; sid:200000967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banconacional907.webcindario.com",nocase; classtype:attempted-recon; sid:200000968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancor-amm.rip",nocase; classtype:attempted-recon; sid:200000969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancorepublica.tullavedigital.repl.co",nocase; classtype:attempted-recon; sid:200000970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancos-santa.es.swtest.ru",nocase; classtype:attempted-recon; sid:200000971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bandard.org",nocase; classtype:attempted-recon; sid:200000972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banditcoil.augeprint.com",nocase; classtype:attempted-recon; sid:200000973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bank-perst.homehd.repl.co",nocase; classtype:attempted-recon; sid:200000974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bank.amilbank.com.br",nocase; classtype:attempted-recon; sid:200000975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bank2939dsdyos22.bank9203kdyose.repl.co",nocase; classtype:attempted-recon; sid:200000976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bankbrou.republica.repl.co",nocase; classtype:attempted-recon; sid:200000977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banki0wa.us",nocase; classtype:attempted-recon; sid:200000978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banking.bendigohamk.com",nocase; classtype:attempted-recon; sid:200000979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bankingalicia.bankinggacilia.repl.co",nocase; classtype:attempted-recon; sid:200000980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bankingalicia.enrique06.repl.co",nocase; classtype:attempted-recon; sid:200000981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bankingarg.galiconliarg.repl.co",nocase; classtype:attempted-recon; sid:200000982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bankinggaliciawww.juandews.repl.co",nocase; classtype:attempted-recon; sid:200000983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bankingseguridad.galihome.repl.co",nocase; classtype:attempted-recon; sid:200000984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bankingseguridad.galihome1.repl.co",nocase; classtype:attempted-recon; sid:200000985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bannacion4l1.webcindario.com",nocase; classtype:attempted-recon; sid:200000986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bannerbank.control-inc.com",nocase; classtype:attempted-recon; sid:200000987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banonline989.webcindario.com",nocase; classtype:attempted-recon; sid:200000988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baohanhtulanh.vn",nocase; classtype:attempted-recon; sid:200000989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baqws.hyperphp.com",nocase; classtype:attempted-recon; sid:200000990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baradua.it",nocase; classtype:attempted-recon; sid:200000991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bardgdf.hyperphp.com",nocase; classtype:attempted-recon; sid:200000992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"barraespaci.webcindario.com",nocase; classtype:attempted-recon; sid:200000993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"basketbackup.com",nocase; classtype:attempted-recon; sid:200000994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bathandfloor.com",nocase; classtype:attempted-recon; sid:200000995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"battlebikefitness.com",nocase; classtype:attempted-recon; sid:200000996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"battleroyale.my.id",nocase; classtype:attempted-recon; sid:200000997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bavarianhaven1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bavarianhaven1.web.app",nocase; classtype:attempted-recon; sid:200000999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bayclive.io",nocase; classtype:attempted-recon; sid:200001000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baytmall.com",nocase; classtype:attempted-recon; sid:200001001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bb3c1101.sibforms.com",nocase; classtype:attempted-recon; sid:200001002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bbccb.webcindario.com",nocase; classtype:attempted-recon; sid:200001003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bbexdfvq.cc",nocase; classtype:attempted-recon; sid:200001004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bbfd.68557.cn",nocase; classtype:attempted-recon; sid:200001005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bbfsgdgh.weeblysite.com",nocase; classtype:attempted-recon; sid:200001006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bbkano.mystoreden.com",nocase; classtype:attempted-recon; sid:200001007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bbmaconline.com",nocase; classtype:attempted-recon; sid:200001008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bbvaonlinefrancs.com",nocase; classtype:attempted-recon; sid:200001009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bc0.homeobanking.repl.co",nocase; classtype:attempted-recon; sid:200001010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bcdc1cde.sibforms.com",nocase; classtype:attempted-recon; sid:200001011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bcffn.klxrmyy.cn",nocase; classtype:attempted-recon; sid:200001012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bcfnfg.hlszyy.cn",nocase; classtype:attempted-recon; sid:200001013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bcp-marketing.com",nocase; classtype:attempted-recon; sid:200001014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bcr8j4js4am4v8pt.webcindario.com",nocase; classtype:attempted-recon; sid:200001015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdbf.67512.cn",nocase; classtype:attempted-recon; sid:200001016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdc-canada.com",nocase; classtype:attempted-recon; sid:200001017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdcsvr.com",nocase; classtype:attempted-recon; sid:200001018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdescon12empresas.blogspot.com",nocase; classtype:attempted-recon; sid:200001019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdf.74g9t2.cn",nocase; classtype:attempted-recon; sid:200001020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdf.75651.cn",nocase; classtype:attempted-recon; sid:200001021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdf.ijingzhen.cn",nocase; classtype:attempted-recon; sid:200001022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdfbf.75616.cn",nocase; classtype:attempted-recon; sid:200001023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdfbf.78197.cn",nocase; classtype:attempted-recon; sid:200001024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdfbfd.eumia5.cn",nocase; classtype:attempted-recon; sid:200001025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdff.79589.cn",nocase; classtype:attempted-recon; sid:200001026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdff.hlxzyy.cn",nocase; classtype:attempted-recon; sid:200001027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdffd.ilincheng.cn",nocase; classtype:attempted-recon; sid:200001028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdfh.73877.cn",nocase; classtype:attempted-recon; sid:200001029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdfhc.81937.cn",nocase; classtype:attempted-recon; sid:200001030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdfhh.clqrmyy.cn",nocase; classtype:attempted-recon; sid:200001031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdfhn.39785.cn",nocase; classtype:attempted-recon; sid:200001032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdfmzqypqy.duckdns.org",nocase; classtype:attempted-recon; sid:200001033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdfn.75835.cn",nocase; classtype:attempted-recon; sid:200001034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdfn.yyouorp.cn",nocase; classtype:attempted-recon; sid:200001035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdfrt.nmqrmyy.cn",nocase; classtype:attempted-recon; sid:200001036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdftj.arqrmyy.cn",nocase; classtype:attempted-recon; sid:200001037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdhbnnlygm.duckdns.org",nocase; classtype:attempted-recon; sid:200001038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdhg.71221.cn",nocase; classtype:attempted-recon; sid:200001039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdhn.hrxrmyy.cn",nocase; classtype:attempted-recon; sid:200001040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdn.73239.cn",nocase; classtype:attempted-recon; sid:200001041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdr.bvxsetc.cn",nocase; classtype:attempted-recon; sid:200001042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdr.owjorth.cn",nocase; classtype:attempted-recon; sid:200001043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdrbiexohc.duckdns.org",nocase; classtype:attempted-recon; sid:200001044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdtermoidraulica.it",nocase; classtype:attempted-recon; sid:200001045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdyixwmrkc.duckdns.org",nocase; classtype:attempted-recon; sid:200001046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beacon.marylands.workers.dev",nocase; classtype:attempted-recon; sid:200001047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beautylablaser.com",nocase; classtype:attempted-recon; sid:200001048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beautyplus365.com",nocase; classtype:attempted-recon; sid:200001049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bebemoss.fr",nocase; classtype:attempted-recon; sid:200001050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beexsrdakw.duckdns.org",nocase; classtype:attempted-recon; sid:200001051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"begin.submit.e87b.live",nocase; classtype:attempted-recon; sid:200001052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"begin.tax.f56b.live",nocase; classtype:attempted-recon; sid:200001053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"begin.tax.g42b.live",nocase; classtype:attempted-recon; sid:200001054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beho.it",nocase; classtype:attempted-recon; sid:200001055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beingmelinda.organicmelinda.com",nocase; classtype:attempted-recon; sid:200001056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bekairos.se",nocase; classtype:attempted-recon; sid:200001057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bella-h29.webflow.io",nocase; classtype:attempted-recon; sid:200001058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bellsouth-verification109.yolasite.com",nocase; classtype:attempted-recon; sid:200001059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bellsouth-verification110.yolasite.com",nocase; classtype:attempted-recon; sid:200001060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bencapornterrnet.irterbrank.top",nocase; classtype:attempted-recon; sid:200001061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bendigo-auth-help.com",nocase; classtype:attempted-recon; sid:200001062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beneficiositau30horas.eastus.cloudapp.azure.com",nocase; classtype:attempted-recon; sid:200001063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beneficiosnaranjas.mmrconsorcios.com.br",nocase; classtype:attempted-recon; sid:200001064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beneficiotuyapay.hostfree.pw",nocase; classtype:attempted-recon; sid:200001065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beqjuwkqds.duckdns.org",nocase; classtype:attempted-recon; sid:200001066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beratmedia.ml",nocase; classtype:attempted-recon; sid:200001067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"berbagikoingratis.com",nocase; classtype:attempted-recon; sid:200001068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"berserk-readmanga.com",nocase; classtype:attempted-recon; sid:200001069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"besqaabxas.duckdns.org",nocase; classtype:attempted-recon; sid:200001070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bestbusinesscreditcard.net",nocase; classtype:attempted-recon; sid:200001071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bestchange-moder.com",nocase; classtype:attempted-recon; sid:200001072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bestchange.com.ru",nocase; classtype:attempted-recon; sid:200001073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bestcnanges.com",nocase; classtype:attempted-recon; sid:200001074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bestethuisstudie.nl",nocase; classtype:attempted-recon; sid:200001075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bestistanbul.org",nocase; classtype:attempted-recon; sid:200001076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beta-metamask.com",nocase; classtype:attempted-recon; sid:200001077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"betamedia.com.ng",nocase; classtype:attempted-recon; sid:200001078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"betasegura-viabcp.movil-sms.com",nocase; classtype:attempted-recon; sid:200001079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"better.com.np",nocase; classtype:attempted-recon; sid:200001080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bewqsx.hyperphp.com",nocase; classtype:attempted-recon; sid:200001081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bexwebmailupdate.web.app",nocase; classtype:attempted-recon; sid:200001082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beyondcryptofx.com",nocase; classtype:attempted-recon; sid:200001083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfbbtf.83292.cn",nocase; classtype:attempted-recon; sid:200001084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfbdf.ksxrmyy.cn",nocase; classtype:attempted-recon; sid:200001085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfbf.81921.cn",nocase; classtype:attempted-recon; sid:200001086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfbg.73936.cn",nocase; classtype:attempted-recon; sid:200001087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfd.79239.cn",nocase; classtype:attempted-recon; sid:200001088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfdb.63279.cn",nocase; classtype:attempted-recon; sid:200001089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfdf.29515.cn",nocase; classtype:attempted-recon; sid:200001090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfdfn.shuziying.cn",nocase; classtype:attempted-recon; sid:200001091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfdh.uhajwjv.cn",nocase; classtype:attempted-recon; sid:200001092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfdhb.76923.cn",nocase; classtype:attempted-recon; sid:200001093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfdhtf.qgjyxsp.cn",nocase; classtype:attempted-recon; sid:200001094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfdj.29223.cn",nocase; classtype:attempted-recon; sid:200001095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfdn.hjxmyyy.cn",nocase; classtype:attempted-recon; sid:200001096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfdnf.gjszyy.cn",nocase; classtype:attempted-recon; sid:200001097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfdtf.dfbf.mzmld.cn",nocase; classtype:attempted-recon; sid:200001098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfdv.73951.cn",nocase; classtype:attempted-recon; sid:200001099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfff.ilangsi.cn",nocase; classtype:attempted-recon; sid:200001100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bffj.alszyy.cn",nocase; classtype:attempted-recon; sid:200001101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bffn.ajxrmyy.cn",nocase; classtype:attempted-recon; sid:200001102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfgf.79585.cn",nocase; classtype:attempted-recon; sid:200001103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfghty.81382.cn",nocase; classtype:attempted-recon; sid:200001104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfgjyt.lkszyy.cn",nocase; classtype:attempted-recon; sid:200001105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfgnf.ibodong.cn",nocase; classtype:attempted-recon; sid:200001106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfhhr.adszyy.cn",nocase; classtype:attempted-recon; sid:200001107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfhn.flxzyy.cn",nocase; classtype:attempted-recon; sid:200001108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfht.32385.cn",nocase; classtype:attempted-recon; sid:200001109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfht.81923.cn",nocase; classtype:attempted-recon; sid:200001110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfht.lpyozjo.cn",nocase; classtype:attempted-recon; sid:200001111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfirrijawp.duckdns.org",nocase; classtype:attempted-recon; sid:200001112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfmm.xlqrmyy.cn",nocase; classtype:attempted-recon; sid:200001113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfn.msszyy.cn",nocase; classtype:attempted-recon; sid:200001114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfnf.97739.cn",nocase; classtype:attempted-recon; sid:200001115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfnfg.79971.cn",nocase; classtype:attempted-recon; sid:200001116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfnt.cpffpbk.cn",nocase; classtype:attempted-recon; sid:200001117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bfntft.38953.cn",nocase; classtype:attempted-recon; sid:200001118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bft.79153.cn",nocase; classtype:attempted-recon; sid:200001119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bgalicitokconfirrloggs8486468.bgaliciloggcon1.repl.co",nocase; classtype:attempted-recon; sid:200001120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bgffg.75829.cn",nocase; classtype:attempted-recon; sid:200001121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bgfn.hxrmyy.cn",nocase; classtype:attempted-recon; sid:200001122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bgielectrical.co.uk",nocase; classtype:attempted-recon; sid:200001123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bgjfmsffxc.duckdns.org",nocase; classtype:attempted-recon; sid:200001124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bgmdudghcx.duckdns.org",nocase; classtype:attempted-recon; sid:200001125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bgnn.khxrmyy.cn",nocase; classtype:attempted-recon; sid:200001126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bgnu.tlfszyy.cn",nocase; classtype:attempted-recon; sid:200001127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bgtju.llaal.cn",nocase; classtype:attempted-recon; sid:200001128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bharatedu.org",nocase; classtype:attempted-recon; sid:200001129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bharathi1809.github.io",nocase; classtype:attempted-recon; sid:200001130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhavin0077.github.io",nocase; classtype:attempted-recon; sid:200001131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhbhu.lfszyy.cn",nocase; classtype:attempted-recon; sid:200001132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhqauogxtu.duckdns.org",nocase; classtype:attempted-recon; sid:200001133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhtn.xwszyy.cn",nocase; classtype:attempted-recon; sid:200001134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhtyfd.5hwxvd3.cn",nocase; classtype:attempted-recon; sid:200001135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhvtvcqnff.duckdns.org",nocase; classtype:attempted-recon; sid:200001136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhxwkl.com",nocase; classtype:attempted-recon; sid:200001137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bia-group.co.za",nocase; classtype:attempted-recon; sid:200001138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biblioteca.sicrediprogresso.com.br",nocase; classtype:attempted-recon; sid:200001139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bicicentroslezama.com",nocase; classtype:attempted-recon; sid:200001140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bideox.pl",nocase; classtype:attempted-recon; sid:200001141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bienvenueespace.podia.com",nocase; classtype:attempted-recon; sid:200001142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bifpwazbju.duckdns.org",nocase; classtype:attempted-recon; sid:200001143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bigshortbets.com",nocase; classtype:attempted-recon; sid:200001144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bigtownchef.with-winting.com",nocase; classtype:attempted-recon; sid:200001145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bill-attset-c8bc.billnproblem.workers.dev",nocase; classtype:attempted-recon; sid:200001146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"billing-status-check.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"billing-status-check.web.app",nocase; classtype:attempted-recon; sid:200001148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"billowing-king-3b55.westernbot.workers.dev",nocase; classtype:attempted-recon; sid:200001149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"billowing-surf-1772.on.fleek.co",nocase; classtype:attempted-recon; sid:200001150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"binance-1inch.listviewss.com",nocase; classtype:attempted-recon; sid:200001151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"binanpex.com",nocase; classtype:attempted-recon; sid:200001152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"binarytrade000.com",nocase; classtype:attempted-recon; sid:200001153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"binrectifier.site",nocase; classtype:attempted-recon; sid:200001154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biodigy.ro",nocase; classtype:attempted-recon; sid:200001155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bioenergyevitalite.com",nocase; classtype:attempted-recon; sid:200001156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"birgitkoerner.clickfunnels.com",nocase; classtype:attempted-recon; sid:200001157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bisentechzone.com",nocase; classtype:attempted-recon; sid:200001158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biswaptrade.org",nocase; classtype:attempted-recon; sid:200001159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitaps.org",nocase; classtype:attempted-recon; sid:200001160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitbaink.web.app",nocase; classtype:attempted-recon; sid:200001161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitcoin-store.net",nocase; classtype:attempted-recon; sid:200001162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitcoinsucels.com",nocase; classtype:attempted-recon; sid:200001163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitfinexbtck.com",nocase; classtype:attempted-recon; sid:200001164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitfinexday.com",nocase; classtype:attempted-recon; sid:200001165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitfinexhkpd.com",nocase; classtype:attempted-recon; sid:200001166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitgert.swap.defi-token.my.id",nocase; classtype:attempted-recon; sid:200001167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bithunnb.web.app",nocase; classtype:attempted-recon; sid:200001168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitkub-app.com",nocase; classtype:attempted-recon; sid:200001169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitkub.digitalhub.co.th",nocase; classtype:attempted-recon; sid:200001170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitkub.ml",nocase; classtype:attempted-recon; sid:200001171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitkubcoin.com",nocase; classtype:attempted-recon; sid:200001172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitmart-trust.net",nocase; classtype:attempted-recon; sid:200001173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitokk.online",nocase; classtype:attempted-recon; sid:200001174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitpiecrypto.com",nocase; classtype:attempted-recon; sid:200001175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitpieex.com",nocase; classtype:attempted-recon; sid:200001176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitte.modimyk.workers.dev",nocase; classtype:attempted-recon; sid:200001177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitter-fog-1ad0.stubhub.workers.dev",nocase; classtype:attempted-recon; sid:200001178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitter-moon-9725.regaccounts1009466.workers.dev",nocase; classtype:attempted-recon; sid:200001179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitter-sunset-daaa.lamseem.workers.dev",nocase; classtype:attempted-recon; sid:200001180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitter-term-08e1.masao.workers.dev",nocase; classtype:attempted-recon; sid:200001181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biupeco.com",nocase; classtype:attempted-recon; sid:200001182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bjoska-inv.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bjoska-inv.web.app",nocase; classtype:attempted-recon; sid:200001184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bjoska-invests.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bjoska-invests.web.app",nocase; classtype:attempted-recon; sid:200001186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bjsjsisuateu72.ydns.eu",nocase; classtype:attempted-recon; sid:200001187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bkhsoaeguz.duckdns.org",nocase; classtype:attempted-recon; sid:200001188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"black-bonus-a22b.greensandersss.workers.dev",nocase; classtype:attempted-recon; sid:200001189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"black-disk-6500.anyrag8021015.workers.dev",nocase; classtype:attempted-recon; sid:200001190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blandbonyarchitect.galiiclia.repl.co",nocase; classtype:attempted-recon; sid:200001191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blankexcitablebetaversion.aztecas.repl.co",nocase; classtype:attempted-recon; sid:200001192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blerecovery.22web.org",nocase; classtype:attempted-recon; sid:200001193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blizzardlogin-us.com",nocase; classtype:attempted-recon; sid:200001194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bloccooperazionemps.com",nocase; classtype:attempted-recon; sid:200001195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blockchainconnect.tk",nocase; classtype:attempted-recon; sid:200001196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blog.porta-nuova.ch",nocase; classtype:attempted-recon; sid:200001197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blopet.avl-developer.es",nocase; classtype:attempted-recon; sid:200001198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blowfish-ltd.co.uk",nocase; classtype:attempted-recon; sid:200001199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blthomehshbhhdhhdhdhsdhss.weeblysite.com",nocase; classtype:attempted-recon; sid:200001200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blxzqdihbv.duckdns.org",nocase; classtype:attempted-recon; sid:200001201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blzghtesrcl.mfs.gg",nocase; classtype:attempted-recon; sid:200001202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bmegroup.bmegroup.workers.dev",nocase; classtype:attempted-recon; sid:200001203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bmegroups.bme4718.workers.dev",nocase; classtype:attempted-recon; sid:200001204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bmretughiw.duckdns.org",nocase; classtype:attempted-recon; sid:200001205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bn01928712.ultimatefreehost.in",nocase; classtype:attempted-recon; sid:200001206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnacion-onli.webcindario.com",nocase; classtype:attempted-recon; sid:200001207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnacrinform.webcindario.com",nocase; classtype:attempted-recon; sid:200001208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnacrsalogin0333.webcindario.com",nocase; classtype:attempted-recon; sid:200001209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnb-pancake.finance",nocase; classtype:attempted-recon; sid:200001210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnb-pancake.org",nocase; classtype:attempted-recon; sid:200001211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnc-bper-eu.preview-domain.com",nocase; classtype:attempted-recon; sid:200001212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bncas72376332.webcindario.com",nocase; classtype:attempted-recon; sid:200001213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bncbncrs2.webcindario.com",nocase; classtype:attempted-recon; sid:200001214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bncbncrs2123.webcindario.com",nocase; classtype:attempted-recon; sid:200001215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bncnar.webcindario.com",nocase; classtype:attempted-recon; sid:200001216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnconacional.odoo.com",nocase; classtype:attempted-recon; sid:200001217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bncontacto00982.hostfree.pw",nocase; classtype:attempted-recon; sid:200001218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bncr-livers61.webcindario.com",nocase; classtype:attempted-recon; sid:200001219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bncre.odoo.com",nocase; classtype:attempted-recon; sid:200001220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bncrfiicr.x10.mx",nocase; classtype:attempted-recon; sid:200001221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bncrna.webcindario.com",nocase; classtype:attempted-recon; sid:200001222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bncrsecuryt.webcindario.com",nocase; classtype:attempted-recon; sid:200001223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnculan.webcindario.com",nocase; classtype:attempted-recon; sid:200001224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnfd.75279.cn",nocase; classtype:attempted-recon; sid:200001225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnfg.85916.cn",nocase; classtype:attempted-recon; sid:200001226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnhvc.0e58k0e.cn",nocase; classtype:attempted-recon; sid:200001227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnkonlinegalicia.liveblog365.com",nocase; classtype:attempted-recon; sid:200001228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnnacionaluer.webcindario.com",nocase; classtype:attempted-recon; sid:200001229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnnacionane.webcindario.com",nocase; classtype:attempted-recon; sid:200001230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnrcsecunacio.webcindario.com",nocase; classtype:attempted-recon; sid:200001231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnrfwixlen.duckdns.org",nocase; classtype:attempted-recon; sid:200001232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bntm.ldszyy.cn",nocase; classtype:attempted-recon; sid:200001233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bntts.webcindario.com",nocase; classtype:attempted-recon; sid:200001234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bntyj.klxmyyy.cn",nocase; classtype:attempted-recon; sid:200001235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnym.slqrmyy.cn",nocase; classtype:attempted-recon; sid:200001236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bo.dasyflores.repl.co",nocase; classtype:attempted-recon; sid:200001237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boatekantokente.com.br",nocase; classtype:attempted-recon; sid:200001238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bobssigns.net",nocase; classtype:attempted-recon; sid:200001239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bofa-onlline-net.preview-domain.com",nocase; classtype:attempted-recon; sid:200001240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bogdonovlerer.com",nocase; classtype:attempted-recon; sid:200001241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boisterous-gumdrop-daa74f.netlify.app",nocase; classtype:attempted-recon; sid:200001242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bokep-indo-hd.duckdns.org",nocase; classtype:attempted-recon; sid:200001243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bokepasrtis.duckdns.org",nocase; classtype:attempted-recon; sid:200001244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bokgabanesolutions.co.za",nocase; classtype:attempted-recon; sid:200001245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bold-flower-99ee.pontufbksd.workers.dev",nocase; classtype:attempted-recon; sid:200001246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bold-lake-3a7f.pojeecay.workers.dev",nocase; classtype:attempted-recon; sid:200001247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bold.wvo.workers.dev",nocase; classtype:attempted-recon; sid:200001248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boldd.martobang.workers.dev",nocase; classtype:attempted-recon; sid:200001249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bombcripto-game-cv.blogspot.com",nocase; classtype:attempted-recon; sid:200001250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bonolle.com",nocase; classtype:attempted-recon; sid:200001251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bonos-cmr.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bonos-cmr.web.app",nocase; classtype:attempted-recon; sid:200001253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bonsaitopics.com",nocase; classtype:attempted-recon; sid:200001254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boom-sun-lillipilli.glitch.me",nocase; classtype:attempted-recon; sid:200001255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boostbyq.com",nocase; classtype:attempted-recon; sid:200001256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boredapeyachtclub.special-mint.com",nocase; classtype:attempted-recon; sid:200001257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"borma.co.id",nocase; classtype:attempted-recon; sid:200001258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bosbosleon.com",nocase; classtype:attempted-recon; sid:200001259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"botecodomanolo.blogspot.com",nocase; classtype:attempted-recon; sid:200001260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boxdrop.onedrive0001.workers.dev",nocase; classtype:attempted-recon; sid:200001261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boxingboyzz.net",nocase; classtype:attempted-recon; sid:200001262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boxypty.com",nocase; classtype:attempted-recon; sid:200001263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bp.swany.net",nocase; classtype:attempted-recon; sid:200001264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bplkpmqbggxhchhqdsy-r-idvfhysxcmvhsreynw-gspefhoxamdltptgppr.glitch.me",nocase; classtype:attempted-recon; sid:200001265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bqchrwcbop.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bqhaoulczc.duckdns.org",nocase; classtype:attempted-recon; sid:200001267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bradesco.netsuporte.com",nocase; classtype:attempted-recon; sid:200001268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bradescoempresas.bankto.me",nocase; classtype:attempted-recon; sid:200001269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brandsoutlet.qa",nocase; classtype:attempted-recon; sid:200001270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brd.junpaim.cn",nocase; classtype:attempted-recon; sid:200001271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brdh.distktf.cn",nocase; classtype:attempted-recon; sid:200001272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"breckenridge.peopletekinc.com",nocase; classtype:attempted-recon; sid:200001273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brgr.xnszyy.cn",nocase; classtype:attempted-recon; sid:200001274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brgr.zjwh03.cn",nocase; classtype:attempted-recon; sid:200001275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bridge-app.co",nocase; classtype:attempted-recon; sid:200001276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bridgedex.online",nocase; classtype:attempted-recon; sid:200001277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brightwisecleaning.com",nocase; classtype:attempted-recon; sid:200001278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"briketstroj.hr",nocase; classtype:attempted-recon; sid:200001279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bripaw.wixsite.com",nocase; classtype:attempted-recon; sid:200001280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brjnrfzmnm.duckdns.org",nocase; classtype:attempted-recon; sid:200001281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brjtv.in",nocase; classtype:attempted-recon; sid:200001282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"broad-poetry-0748.on.fleek.co",nocase; classtype:attempted-recon; sid:200001283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"broad-violet-b788.wesmoded.workers.dev",nocase; classtype:attempted-recon; sid:200001284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"broadband-102363.weeblysite.com",nocase; classtype:attempted-recon; sid:200001285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brohgsebroysh.hostfree.pw",nocase; classtype:attempted-recon; sid:200001286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"broke.bibirpergikedanaubuatan.workers.dev",nocase; classtype:attempted-recon; sid:200001287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"broken-lab-2ee7.kristina74.workers.dev",nocase; classtype:attempted-recon; sid:200001288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brookfieldminingtrading.com",nocase; classtype:attempted-recon; sid:200001289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-forrunning.top",nocase; classtype:attempted-recon; sid:200001290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-move.top",nocase; classtype:attempted-recon; sid:200001291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-ooke.top",nocase; classtype:attempted-recon; sid:200001292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-runfarther.top",nocase; classtype:attempted-recon; sid:200001293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-xsbdyugd.top",nocase; classtype:attempted-recon; sid:200001294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-xsdaodab.top",nocase; classtype:attempted-recon; sid:200001295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-xsdauofc.top",nocase; classtype:attempted-recon; sid:200001296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks1914.top",nocase; classtype:attempted-recon; sid:200001297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksair.top",nocase; classtype:attempted-recon; sid:200001298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksdiscount.top",nocase; classtype:attempted-recon; sid:200001299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksfactoryoutlets.com",nocase; classtype:attempted-recon; sid:200001300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksforsports.top",nocase; classtype:attempted-recon; sid:200001301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksghost13sale.com",nocase; classtype:attempted-recon; sid:200001302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brookshome.top",nocase; classtype:attempted-recon; sid:200001303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksmajor.top",nocase; classtype:attempted-recon; sid:200001304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksnewmethod.top",nocase; classtype:attempted-recon; sid:200001305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksnewsports.top",nocase; classtype:attempted-recon; sid:200001306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksonlinekaufen.com",nocase; classtype:attempted-recon; sid:200001307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksoutletshoes.com",nocase; classtype:attempted-recon; sid:200001308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksoutletuk.com",nocase; classtype:attempted-recon; sid:200001309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksprime.top",nocase; classtype:attempted-recon; sid:200001310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksrunningphilippines.com",nocase; classtype:attempted-recon; sid:200001311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksrunningshoesusa.com",nocase; classtype:attempted-recon; sid:200001312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksrunshoeshopping.top",nocase; classtype:attempted-recon; sid:200001313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brookssalemalaysia.com",nocase; classtype:attempted-recon; sid:200001314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksshoeoutlet.com",nocase; classtype:attempted-recon; sid:200001315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksshoesmalaysiaoutlet.com",nocase; classtype:attempted-recon; sid:200001316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksshoesoutletfactory.com",nocase; classtype:attempted-recon; sid:200001317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksshoesoutletonline.us",nocase; classtype:attempted-recon; sid:200001318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksshoesoutletsingapore.com",nocase; classtype:attempted-recon; sid:200001319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksshoessouthafrica.com",nocase; classtype:attempted-recon; sid:200001320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksshoesstore.us",nocase; classtype:attempted-recon; sid:200001321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksshoesuae.com",nocase; classtype:attempted-recon; sid:200001322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksshoesukfactory.com",nocase; classtype:attempted-recon; sid:200001323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksshoesuksale.com",nocase; classtype:attempted-recon; sid:200001324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brookssneakerssale.us",nocase; classtype:attempted-recon; sid:200001325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brookssoft.top",nocase; classtype:attempted-recon; sid:200001326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksusashoes.com",nocase; classtype:attempted-recon; sid:200001327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brouconnectlogc.receivingbrou.repl.co",nocase; classtype:attempted-recon; sid:200001328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brouhu.home112.repl.co",nocase; classtype:attempted-recon; sid:200001329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brouonlibankuy.brouonlibankuy.repl.co",nocase; classtype:attempted-recon; sid:200001330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"broupersonasban.broupersonasban.repl.co",nocase; classtype:attempted-recon; sid:200001331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"broupersonasuy.broupersonasuy.repl.co",nocase; classtype:attempted-recon; sid:200001332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brousegurity.brou12sd.repl.co",nocase; classtype:attempted-recon; sid:200001333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brouseguro.gustavorodri101.repl.co",nocase; classtype:attempted-recon; sid:200001334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brroooksssale.com",nocase; classtype:attempted-recon; sid:200001335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bruceslufthadas0291.clickfunnels.com",nocase; classtype:attempted-recon; sid:200001336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brunetaw.hyperphp.com",nocase; classtype:attempted-recon; sid:200001337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bruralcleangtwashing.com",nocase; classtype:attempted-recon; sid:200001338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brutallyhuman.com",nocase; classtype:attempted-recon; sid:200001339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bruus999.galici999.repl.co",nocase; classtype:attempted-recon; sid:200001340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bs2www2.blogspot.com",nocase; classtype:attempted-recon; sid:200001341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bscpad.com.pe",nocase; classtype:attempted-recon; sid:200001342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bsnshlp.sprtacn.scrthlp.workers.dev",nocase; classtype:attempted-recon; sid:200001343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bspotrpuml.duckdns.org",nocase; classtype:attempted-recon; sid:200001344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bsssc.co.uk",nocase; classtype:attempted-recon; sid:200001345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bswap-finance.web.app",nocase; classtype:attempted-recon; sid:200001346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bsxgju.com",nocase; classtype:attempted-recon; sid:200001347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-101220.weeblysite.com",nocase; classtype:attempted-recon; sid:200001348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-103535.weeblysite.com",nocase; classtype:attempted-recon; sid:200001349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-103544.weeblysite.com",nocase; classtype:attempted-recon; sid:200001350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-104122.weeblysite.com",nocase; classtype:attempted-recon; sid:200001351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-105400.weeblysite.com",nocase; classtype:attempted-recon; sid:200001352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-107397.weeblysite.com",nocase; classtype:attempted-recon; sid:200001353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-107523onlinefrontiiermainadministraton.weeblysite.com",nocase; classtype:attempted-recon; sid:200001354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-107661.square.site",nocase; classtype:attempted-recon; sid:200001355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-connecthome.jomalsac.com",nocase; classtype:attempted-recon; sid:200001356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-email-login-page-108143.weeblysite.com",nocase; classtype:attempted-recon; sid:200001357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-home-page-109263.weeblysite.com",nocase; classtype:attempted-recon; sid:200001358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-home-page-webmaiil.weeblysite.com",nocase; classtype:attempted-recon; sid:200001359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-home-pagewebeeey.weeblysite.com",nocase; classtype:attempted-recon; sid:200001360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-internet-104732.square.site",nocase; classtype:attempted-recon; sid:200001361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-internet-108119.weeblysite.com",nocase; classtype:attempted-recon; sid:200001362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-internet-108918.weeblysite.com",nocase; classtype:attempted-recon; sid:200001363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-mail-verification-101111.weeblysite.com",nocase; classtype:attempted-recon; sid:200001364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt.my-style.in",nocase; classtype:attempted-recon; sid:200001365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt10001-10001.weeblysite.com",nocase; classtype:attempted-recon; sid:200001366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btbusinessbilling.wordpress.com",nocase; classtype:attempted-recon; sid:200001367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btbusinesscommunication.github.io",nocase; classtype:attempted-recon; sid:200001368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnect-109798.square.site",nocase; classtype:attempted-recon; sid:200001369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnect-40f138.webflow.io",nocase; classtype:attempted-recon; sid:200001370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnect-53e7d5.webflow.io",nocase; classtype:attempted-recon; sid:200001371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnect-5bc136.webflow.io",nocase; classtype:attempted-recon; sid:200001372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnect-7d5123.webflow.io",nocase; classtype:attempted-recon; sid:200001373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnect-af4a3e.webflow.io",nocase; classtype:attempted-recon; sid:200001374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnect-b9878f.webflow.io",nocase; classtype:attempted-recon; sid:200001375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnect-d90e70.webflow.io",nocase; classtype:attempted-recon; sid:200001376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnect-eda52a.webflow.io",nocase; classtype:attempted-recon; sid:200001377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnect-ee8de8.webflow.io",nocase; classtype:attempted-recon; sid:200001378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnet.webflow.io",nocase; classtype:attempted-recon; sid:200001379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btfdn.ly4yanr.cn",nocase; classtype:attempted-recon; sid:200001380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btghdwqxxkg.weeblysite.com",nocase; classtype:attempted-recon; sid:200001381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btghhdwqkgg.weeblysite.com",nocase; classtype:attempted-recon; sid:200001382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btgt.jjmmj.cn",nocase; classtype:attempted-recon; sid:200001383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bthvweiful.duckdns.org",nocase; classtype:attempted-recon; sid:200001384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternet-100298.weeblysite.com",nocase; classtype:attempted-recon; sid:200001385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternet-103303.weeblysite.com",nocase; classtype:attempted-recon; sid:200001386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternetmail-102344.weeblysite.com",nocase; classtype:attempted-recon; sid:200001387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternetupgrade989service-105841.weeblysite.com",nocase; classtype:attempted-recon; sid:200001388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btjj.learnyou.cn",nocase; classtype:attempted-recon; sid:200001389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btjyk.juzhongchuang.cn",nocase; classtype:attempted-recon; sid:200001390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btlyrgh.mfs.gg",nocase; classtype:attempted-recon; sid:200001391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btqptpx.cf",nocase; classtype:attempted-recon; sid:200001392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btsei.net",nocase; classtype:attempted-recon; sid:200001393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btyk.gezhao0421.cn",nocase; classtype:attempted-recon; sid:200001394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"buaizonline.com",nocase; classtype:attempted-recon; sid:200001395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bufiruska.co.vu",nocase; classtype:attempted-recon; sid:200001396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"buildclerk.com",nocase; classtype:attempted-recon; sid:200001397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bukidnonmockpolls.com",nocase; classtype:attempted-recon; sid:200001398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bullaburrarfs.org.au",nocase; classtype:attempted-recon; sid:200001399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bullettrainbtn2.blogspot.com",nocase; classtype:attempted-recon; sid:200001400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bullettrainbtn4.blogspot.com",nocase; classtype:attempted-recon; sid:200001401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bullettrainbtn5.blogspot.com",nocase; classtype:attempted-recon; sid:200001402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bund-de.lojaintegrada.com.br",nocase; classtype:attempted-recon; sid:200001403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"buralenergiasolar.blogspot.com",nocase; classtype:attempted-recon; sid:200001404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"busanopen.org",nocase; classtype:attempted-recon; sid:200001405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"business-page-appeal-102-00521.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"business-page-appeal-106-00707.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"business-page-appeal-106-00707.web.app",nocase; classtype:attempted-recon; sid:200001408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"business-page-appeal-1260-0963.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"business-page-appeal-1260-0963.web.app",nocase; classtype:attempted-recon; sid:200001410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"business-page-appeal-1900-0072.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"business-page-appeal-1900-0072.web.app",nocase; classtype:attempted-recon; sid:200001412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"butikilopas.co.vu",nocase; classtype:attempted-recon; sid:200001413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"butyvansoldskool.com",nocase; classtype:attempted-recon; sid:200001414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bvcmh.ghadfyp.cn",nocase; classtype:attempted-recon; sid:200001415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bvfdc.pgv06ki.cn",nocase; classtype:attempted-recon; sid:200001416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bviwalqpih.duckdns.org",nocase; classtype:attempted-recon; sid:200001417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bvrvtotgkm.duckdns.org",nocase; classtype:attempted-recon; sid:200001418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bvsrpuepiy.duckdns.org",nocase; classtype:attempted-recon; sid:200001419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bvvhj.jdszyy.cn",nocase; classtype:attempted-recon; sid:200001420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bw-bank-de.info",nocase; classtype:attempted-recon; sid:200001421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwctqbstep.duckdns.org",nocase; classtype:attempted-recon; sid:200001422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwiredvshh.duckdns.org",nocase; classtype:attempted-recon; sid:200001423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.lqyinmj.cn",nocase; classtype:attempted-recon; sid:200001424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bybij.vip",nocase; classtype:attempted-recon; sid:200001425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bybte.vip",nocase; classtype:attempted-recon; sid:200001426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"byimnewtgf.duckdns.org",nocase; classtype:attempted-recon; sid:200001427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"byringenieros.com",nocase; classtype:attempted-recon; sid:200001428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"byuqajhtuo.duckdns.org",nocase; classtype:attempted-recon; sid:200001429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c.curiousmorty.be",nocase; classtype:attempted-recon; sid:200001430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c.gibsonwine.workers.dev",nocase; classtype:attempted-recon; sid:200001431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c.loveawaits.be",nocase; classtype:attempted-recon; sid:200001432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c.mail.com",nocase; classtype:attempted-recon; sid:200001433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c1481668.ferozo.com",nocase; classtype:attempted-recon; sid:200001434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c1491755.ferozo.com",nocase; classtype:attempted-recon; sid:200001435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c1681628.ferozo.com",nocase; classtype:attempted-recon; sid:200001436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c1771865.ferozo.com",nocase; classtype:attempted-recon; sid:200001437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c1791619.ferozo.com",nocase; classtype:attempted-recon; sid:200001438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c1991874.ferozo.com",nocase; classtype:attempted-recon; sid:200001439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c1hbn236.caspio.com",nocase; classtype:attempted-recon; sid:200001440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c1hbq274.caspio.com",nocase; classtype:attempted-recon; sid:200001441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c1tz2n.com",nocase; classtype:attempted-recon; sid:200001442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c20f0789f73545650ebf57fa7dddc.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c20f0789f73545650ebf57fa7dddc.web.app",nocase; classtype:attempted-recon; sid:200001444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c2511263.ferozo.com",nocase; classtype:attempted-recon; sid:200001445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c2dc5b99.chgmar.pages.dev",nocase; classtype:attempted-recon; sid:200001446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c2dcw069.caspio.com",nocase; classtype:attempted-recon; sid:200001447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c2hch255.caspio.com",nocase; classtype:attempted-recon; sid:200001448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c3abh425.caspio.com",nocase; classtype:attempted-recon; sid:200001449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c4ff1.ascriancasloucas.pt",nocase; classtype:attempted-recon; sid:200001450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c6ebv708.caspio.com",nocase; classtype:attempted-recon; sid:200001451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cabanacotulariesului.ro",nocase; classtype:attempted-recon; sid:200001452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cacfnd.cam",nocase; classtype:attempted-recon; sid:200001453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cache.nebula.phx3.secureserver.net",nocase; classtype:attempted-recon; sid:200001454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cadastroauxilio.top",nocase; classtype:attempted-recon; sid:200001455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cadastros.swedencentral.cloudapp.azure.com",nocase; classtype:attempted-recon; sid:200001456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caeng.hyperphp.com",nocase; classtype:attempted-recon; sid:200001457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing-666b3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing-666b3.web.app",nocase; classtype:attempted-recon; sid:200001459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing-be.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing-be.web.app",nocase; classtype:attempted-recon; sid:200001461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing-cab8a.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing-cab8a.web.app",nocase; classtype:attempted-recon; sid:200001463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing-d0d36.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing-d0d36.web.app",nocase; classtype:attempted-recon; sid:200001465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing-da628.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing-da628.web.app",nocase; classtype:attempted-recon; sid:200001467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing-error.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing-error.web.app",nocase; classtype:attempted-recon; sid:200001469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing-f37e9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing-f37e9.web.app",nocase; classtype:attempted-recon; sid:200001471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing-fd099.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing-fd099.web.app",nocase; classtype:attempted-recon; sid:200001473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caisseing.web.app",nocase; classtype:attempted-recon; sid:200001475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caixainfos.cargo.site",nocase; classtype:attempted-recon; sid:200001476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caixaregularize.blogspot.com",nocase; classtype:attempted-recon; sid:200001477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caixaseguradora.quadientcloud.com",nocase; classtype:attempted-recon; sid:200001478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cajaarequipa.com",nocase; classtype:attempted-recon; sid:200001479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cajabanrural.negocio.site",nocase; classtype:attempted-recon; sid:200001480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cajapiurape.com",nocase; classtype:attempted-recon; sid:200001481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cajarequipaserv.com",nocase; classtype:attempted-recon; sid:200001482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"calgaryren234tlistwca.ru",nocase; classtype:attempted-recon; sid:200001483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"calm-bakum.mchkkbny.workers.dev",nocase; classtype:attempted-recon; sid:200001484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"calm-bird.media-personal.workers.dev",nocase; classtype:attempted-recon; sid:200001485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"calm-grass-8770.tropicstarsfd2299.workers.dev",nocase; classtype:attempted-recon; sid:200001486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"calm-lab-e74a.cattaleya76.workers.dev",nocase; classtype:attempted-recon; sid:200001487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"calstateedu.securevdr.com",nocase; classtype:attempted-recon; sid:200001488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"camiseta-verde.blogspot.com",nocase; classtype:attempted-recon; sid:200001489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"campus-ic-campus261015.riggio.workers.dev",nocase; classtype:attempted-recon; sid:200001490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"canadavisitisrael.com",nocase; classtype:attempted-recon; sid:200001491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"canales-cmr.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"canales-cmr.web.app",nocase; classtype:attempted-recon; sid:200001493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"canpost-parcel.com",nocase; classtype:attempted-recon; sid:200001494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"canpostpackage.com",nocase; classtype:attempted-recon; sid:200001495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"capacitacionserprof.cl",nocase; classtype:attempted-recon; sid:200001496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"capitalitary.info",nocase; classtype:attempted-recon; sid:200001497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"capitecza.com",nocase; classtype:attempted-recon; sid:200001498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caracasmateriais.blogspot.com",nocase; classtype:attempted-recon; sid:200001499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"carcaretakers.com",nocase; classtype:attempted-recon; sid:200001500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"carlos.hostfree.pw",nocase; classtype:attempted-recon; sid:200001501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"carpediemxp.com",nocase; classtype:attempted-recon; sid:200001502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cas-polygon.blogspot.com",nocase; classtype:attempted-recon; sid:200001503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cas2323233.webcindario.com",nocase; classtype:attempted-recon; sid:200001504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cas2323233767.webcindario.com",nocase; classtype:attempted-recon; sid:200001505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cas2328743.webcindario.com",nocase; classtype:attempted-recon; sid:200001506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"casadoborracheiroxx.blogspot.com",nocase; classtype:attempted-recon; sid:200001507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"casanaturalle.com",nocase; classtype:attempted-recon; sid:200001508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"case10002361316.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"case10002361316.web.app",nocase; classtype:attempted-recon; sid:200001510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"case10502036121.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"case10502036121.web.app",nocase; classtype:attempted-recon; sid:200001512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"case984932423.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"case984932423.web.app",nocase; classtype:attempted-recon; sid:200001514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caseid4785055283customerservice.blogspot.com",nocase; classtype:attempted-recon; sid:200001515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"casemetahelpsupport.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"casemetahelpsupport.web.app",nocase; classtype:attempted-recon; sid:200001517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"casobanco22.casobanco22.repl.co",nocase; classtype:attempted-recon; sid:200001518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"casobancolo22.casobancolo22.repl.co",nocase; classtype:attempted-recon; sid:200001519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"casobancolomb1.casobancolomb1.repl.co",nocase; classtype:attempted-recon; sid:200001520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"casogalicia2352234.casogalicia278.repl.co",nocase; classtype:attempted-recon; sid:200001521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"castorhd.com",nocase; classtype:attempted-recon; sid:200001522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cateringfoodanddrinksupplies777.business.site",nocase; classtype:attempted-recon; sid:200001523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"catur.com",nocase; classtype:attempted-recon; sid:200001524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"catus.cat",nocase; classtype:attempted-recon; sid:200001525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cavedom.net.ve",nocase; classtype:attempted-recon; sid:200001526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caxxjxzlds.duckdns.org",nocase; classtype:attempted-recon; sid:200001527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caycos.beispielseite-wmka.de",nocase; classtype:attempted-recon; sid:200001528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cb-portal.com",nocase; classtype:attempted-recon; sid:200001529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cbhou91px.fiswebdv.net",nocase; classtype:attempted-recon; sid:200001530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cbrb.mlxzyy.cn",nocase; classtype:attempted-recon; sid:200001531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cbskateshoop.blogspot.com",nocase; classtype:attempted-recon; sid:200001532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cbzucmxfdv.duckdns.org",nocase; classtype:attempted-recon; sid:200001533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cc50391.tmweb.ru",nocase; classtype:attempted-recon; sid:200001534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ccjrlaw.com",nocase; classtype:attempted-recon; sid:200001535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ccotjnvavv.duckdns.org",nocase; classtype:attempted-recon; sid:200001536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ccpannel87655.79997797.repl.co",nocase; classtype:attempted-recon; sid:200001537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ccvkjdigis.duckdns.org",nocase; classtype:attempted-recon; sid:200001538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cd-class.web.app",nocase; classtype:attempted-recon; sid:200001539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cd1pro1pl.web.app",nocase; classtype:attempted-recon; sid:200001540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cd39439.tmweb.ru",nocase; classtype:attempted-recon; sid:200001541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cdb.jxltcbz.cn",nocase; classtype:attempted-recon; sid:200001542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cdbd.32759.cn",nocase; classtype:attempted-recon; sid:200001543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cdbitalia.net",nocase; classtype:attempted-recon; sid:200001544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cdemp.cl",nocase; classtype:attempted-recon; sid:200001545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cdgd.fu62q2.cn",nocase; classtype:attempted-recon; sid:200001546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cdgdr.87537.cn",nocase; classtype:attempted-recon; sid:200001547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cdn-32965.airbnb-onelogin.com",nocase; classtype:attempted-recon; sid:200001548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cdn.weasy.io",nocase; classtype:attempted-recon; sid:200001549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cdsg.37336.cn",nocase; classtype:attempted-recon; sid:200001550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cdsg.76851.cn",nocase; classtype:attempted-recon; sid:200001551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cdsg.y02tqob.cn",nocase; classtype:attempted-recon; sid:200001552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cdv.67129.cn",nocase; classtype:attempted-recon; sid:200001553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cdved.39771.cn",nocase; classtype:attempted-recon; sid:200001554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cdvf.79913.cn",nocase; classtype:attempted-recon; sid:200001555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cdxvg.maicgxv.cn",nocase; classtype:attempted-recon; sid:200001556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cef8vwt7y9h.typeform.com",nocase; classtype:attempted-recon; sid:200001557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"centrededonnees.go.yj.fr",nocase; classtype:attempted-recon; sid:200001558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cents-ability.org",nocase; classtype:attempted-recon; sid:200001559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"certificadosgobmx.com",nocase; classtype:attempted-recon; sid:200001560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cerulean-obtainable-hoodie.glitch.me",nocase; classtype:attempted-recon; sid:200001561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cetuylkmwh.duckdns.org",nocase; classtype:attempted-recon; sid:200001562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cewek-indo-enak.duckdns.org",nocase; classtype:attempted-recon; sid:200001563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cfbfb.lrpxche.cn",nocase; classtype:attempted-recon; sid:200001564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cfdn.67219.cn",nocase; classtype:attempted-recon; sid:200001565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cfds.tradetrenders.com",nocase; classtype:attempted-recon; sid:200001566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cffdh.nnxzyy.cn",nocase; classtype:attempted-recon; sid:200001567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cfgghh.zdd3518.cn",nocase; classtype:attempted-recon; sid:200001568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cfghh.lsjl120.cn",nocase; classtype:attempted-recon; sid:200001569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cfghh.wuxiktvzp.cn",nocase; classtype:attempted-recon; sid:200001570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cfheut468.xyz",nocase; classtype:attempted-recon; sid:200001571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cfibzbxcmz.duckdns.org",nocase; classtype:attempted-recon; sid:200001572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cflaxii.com",nocase; classtype:attempted-recon; sid:200001573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cftarffbwz.duckdns.org",nocase; classtype:attempted-recon; sid:200001574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cftechno.in",nocase; classtype:attempted-recon; sid:200001575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ch-328328328832.blogspot.com",nocase; classtype:attempted-recon; sid:200001576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ch-483828832.blogspot.com",nocase; classtype:attempted-recon; sid:200001577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chabow.hyperphp.com",nocase; classtype:attempted-recon; sid:200001578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chain-node.org",nocase; classtype:attempted-recon; sid:200001579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chain-sync.org",nocase; classtype:attempted-recon; sid:200001580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chainofchanges.com",nocase; classtype:attempted-recon; sid:200001581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chainswap-ecomi.com",nocase; classtype:attempted-recon; sid:200001582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chalawqx.hyperphp.com",nocase; classtype:attempted-recon; sid:200001583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chalkerabeat.web.app",nocase; classtype:attempted-recon; sid:200001584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chancey.byethost31.com",nocase; classtype:attempted-recon; sid:200001585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chariff16.github.io",nocase; classtype:attempted-recon; sid:200001586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chase-bank.cryptovestify.net",nocase; classtype:attempted-recon; sid:200001587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chase-help-support-locked.blogspot.com",nocase; classtype:attempted-recon; sid:200001588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chase-onlinehelp.blogspot.com",nocase; classtype:attempted-recon; sid:200001589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chasecertificatesusigon.bill48408mailfonycom.workers.dev",nocase; classtype:attempted-recon; sid:200001590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chat-whatsapp40982.shinxxdg.my.id",nocase; classtype:attempted-recon; sid:200001591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chats-whatsapp37185.shinxxdg.my.id",nocase; classtype:attempted-recon; sid:200001592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chatter-accessible-fold.glitch.me",nocase; classtype:attempted-recon; sid:200001593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cheapestvaninsurance.org",nocase; classtype:attempted-recon; sid:200001594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cheatdominoku.com",nocase; classtype:attempted-recon; sid:200001595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"check-status-31f89.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"check-status-31f89.web.app",nocase; classtype:attempted-recon; sid:200001597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmynewphotos.com",nocase; classtype:attempted-recon; sid:200001598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-2000003548754996801.ml",nocase; classtype:attempted-recon; sid:200001599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-2000003548754996802.ml",nocase; classtype:attempted-recon; sid:200001600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-2000003548754996804.ml",nocase; classtype:attempted-recon; sid:200001601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-2000003548754996805.ml",nocase; classtype:attempted-recon; sid:200001602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-2000003548754996806.ml",nocase; classtype:attempted-recon; sid:200001603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-2000003548754996807.ml",nocase; classtype:attempted-recon; sid:200001604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-2000003548754996808.ml",nocase; classtype:attempted-recon; sid:200001605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-5000000254587856326901.ml",nocase; classtype:attempted-recon; sid:200001606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-5000000254587856326902.ml",nocase; classtype:attempted-recon; sid:200001607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-5000000254587856326903.ml",nocase; classtype:attempted-recon; sid:200001608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-5000000254587856326906.ml",nocase; classtype:attempted-recon; sid:200001609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-5000000254587856326908.ml",nocase; classtype:attempted-recon; sid:200001610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-5000000254587856326909.ml",nocase; classtype:attempted-recon; sid:200001611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-fb-30000325489652.tk",nocase; classtype:attempted-recon; sid:200001612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-fb-30000325489653.tk",nocase; classtype:attempted-recon; sid:200001613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-fb-30000325489656.tk",nocase; classtype:attempted-recon; sid:200001614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-fb-30000325489657.tk",nocase; classtype:attempted-recon; sid:200001615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-fb-30000325489659.tk",nocase; classtype:attempted-recon; sid:200001616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-fb-90000065632145920.tk",nocase; classtype:attempted-recon; sid:200001617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-fb-90000065632145921.tk",nocase; classtype:attempted-recon; sid:200001618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkskin.ru",nocase; classtype:attempted-recon; sid:200001619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail25.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail25.web.app",nocase; classtype:attempted-recon; sid:200001621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail26.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail26.web.app",nocase; classtype:attempted-recon; sid:200001623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail27.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail27.web.app",nocase; classtype:attempted-recon; sid:200001625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail28.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail28.web.app",nocase; classtype:attempted-recon; sid:200001627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail29.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail29.web.app",nocase; classtype:attempted-recon; sid:200001629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail30.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail30.web.app",nocase; classtype:attempted-recon; sid:200001631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail31.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail31.web.app",nocase; classtype:attempted-recon; sid:200001633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail32.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail32.web.app",nocase; classtype:attempted-recon; sid:200001635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail33.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail33.web.app",nocase; classtype:attempted-recon; sid:200001637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail34.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail34.web.app",nocase; classtype:attempted-recon; sid:200001639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail35.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail35.web.app",nocase; classtype:attempted-recon; sid:200001641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail36.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail36.web.app",nocase; classtype:attempted-recon; sid:200001643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cheerydarkseagreenmodels.galiciiaweb.repl.co",nocase; classtype:attempted-recon; sid:200001644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cherrr12.blogspot.com",nocase; classtype:attempted-recon; sid:200001645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chicagotrolleyservice.com",nocase; classtype:attempted-recon; sid:200001646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chiddingstonenursery.co.uk",nocase; classtype:attempted-recon; sid:200001647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chihealthsolutions.com",nocase; classtype:attempted-recon; sid:200001648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chikkuthomas.github.io",nocase; classtype:attempted-recon; sid:200001649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"china-gear.org",nocase; classtype:attempted-recon; sid:200001650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chinmayavidyalayarspuram.com",nocase; classtype:attempted-recon; sid:200001651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chipfree.b0t.my.id",nocase; classtype:attempted-recon; sid:200001652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chiragrajoria.github.io",nocase; classtype:attempted-recon; sid:200001653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chithirapurampalace.com",nocase; classtype:attempted-recon; sid:200001654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chivalrous-gentle-patio.glitch.me",nocase; classtype:attempted-recon; sid:200001655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chiyuo.ec-site.net",nocase; classtype:attempted-recon; sid:200001656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chkcaptcha14.ml",nocase; classtype:attempted-recon; sid:200001657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chkcaptcha16.ml",nocase; classtype:attempted-recon; sid:200001658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chkcaptcha17.ml",nocase; classtype:attempted-recon; sid:200001659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chkcaptcha2.ml",nocase; classtype:attempted-recon; sid:200001660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chkcaptcha8.ml",nocase; classtype:attempted-recon; sid:200001661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chkredirects.ml",nocase; classtype:attempted-recon; sid:200001662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chois.jp",nocase; classtype:attempted-recon; sid:200001663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cholestati.com",nocase; classtype:attempted-recon; sid:200001664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chutlincrapo.web.app",nocase; classtype:attempted-recon; sid:200001665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cielegwwq.hyperphp.com",nocase; classtype:attempted-recon; sid:200001666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cifighe.com",nocase; classtype:attempted-recon; sid:200001667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cihjeae.r.bh.d.sendibt3.com",nocase; classtype:attempted-recon; sid:200001668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cimeronline.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cimeronline.web.app",nocase; classtype:attempted-recon; sid:200001670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cimeronlineiadesistemi.web.app",nocase; classtype:attempted-recon; sid:200001671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cintasejatidrink.com",nocase; classtype:attempted-recon; sid:200001672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cirious.com",nocase; classtype:attempted-recon; sid:200001673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cirrilla-stripe-form.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cirrilla-stripe-form.web.app",nocase; classtype:attempted-recon; sid:200001675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cisteodpady.cz",nocase; classtype:attempted-recon; sid:200001676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"citizenssecure.live",nocase; classtype:attempted-recon; sid:200001677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"citulje-pomeni.com",nocase; classtype:attempted-recon; sid:200001678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"city-index.co",nocase; classtype:attempted-recon; sid:200001679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"city-of-jazz.de",nocase; classtype:attempted-recon; sid:200001680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ciudadanoseguro.cl",nocase; classtype:attempted-recon; sid:200001681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ciuxzducsf.duckdns.org",nocase; classtype:attempted-recon; sid:200001682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cj20pl22pro.web.app",nocase; classtype:attempted-recon; sid:200001683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cjovoecyqa.duckdns.org",nocase; classtype:attempted-recon; sid:200001684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cjvkdopyzv.duckdns.org",nocase; classtype:attempted-recon; sid:200001685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ckk1mjrvcd.eu.loclx.io",nocase; classtype:attempted-recon; sid:200001686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cksdrdptrq.duckdns.org",nocase; classtype:attempted-recon; sid:200001687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claim-free-uc-mummy-m4glacier-material.duckdns.org",nocase; classtype:attempted-recon; sid:200001688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claim-free-uc-pharaohmax-glacier-and-jok.duckdns.org",nocase; classtype:attempted-recon; sid:200001689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claim-goblintown.wtf",nocase; classtype:attempted-recon; sid:200001690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claim-loctrec-fireefire-terbaru.duckdns.org",nocase; classtype:attempted-recon; sid:200001691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claim-uc-noww-free.duckdns.org",nocase; classtype:attempted-recon; sid:200001692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claim.submit.e54c.live",nocase; classtype:attempted-recon; sid:200001693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claim.submit.e93b.live",nocase; classtype:attempted-recon; sid:200001694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claim.submit.g38b.live",nocase; classtype:attempted-recon; sid:200001695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claim.tax.e38a.live",nocase; classtype:attempted-recon; sid:200001696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claim.tax.f49b.live",nocase; classtype:attempted-recon; sid:200001697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claimchip1-5b.com",nocase; classtype:attempted-recon; sid:200001698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claimsolana.bar",nocase; classtype:attempted-recon; sid:200001699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claritymall.com",nocase; classtype:attempted-recon; sid:200001700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claro-link.brsafe.com.br",nocase; classtype:attempted-recon; sid:200001701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"classicarrowtech.com",nocase; classtype:attempted-recon; sid:200001702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"classiceyewear.in",nocase; classtype:attempted-recon; sid:200001703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claus.bz",nocase; classtype:attempted-recon; sid:200001704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clavedinabancolomco.juliocarro.repl.co",nocase; classtype:attempted-recon; sid:200001705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clblink.live",nocase; classtype:attempted-recon; sid:200001706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cleargalaxy.net",nocase; classtype:attempted-recon; sid:200001707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cleonardproperties.com",nocase; classtype:attempted-recon; sid:200001708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clever-false-desk.glitch.me",nocase; classtype:attempted-recon; sid:200001709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cleverlandbuyers.com",nocase; classtype:attempted-recon; sid:200001710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clic.ae",nocase; classtype:attempted-recon; sid:200001711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clicklo.live",nocase; classtype:attempted-recon; sid:200001712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clicknovidadesespecialdeaniversario.com",nocase; classtype:attempted-recon; sid:200001713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"client-test-hr9xy.ondigitalocean.app",nocase; classtype:attempted-recon; sid:200001714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clienteperfil.bradapp.site",nocase; classtype:attempted-recon; sid:200001715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clienti.accesso.sicuro.youthnest.in",nocase; classtype:attempted-recon; sid:200001716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clients.devtux.com",nocase; classtype:attempted-recon; sid:200001717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cliffordchnllp.com",nocase; classtype:attempted-recon; sid:200001718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"climbing-sunset-galliform.glitch.me",nocase; classtype:attempted-recon; sid:200001719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clipgags.com",nocase; classtype:attempted-recon; sid:200001720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clockurl.com",nocase; classtype:attempted-recon; sid:200001721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clone-7473c.web.app",nocase; classtype:attempted-recon; sid:200001722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"closebystore.com",nocase; classtype:attempted-recon; sid:200001723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"closingdocs9480.myportfolio.com",nocase; classtype:attempted-recon; sid:200001724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-based-preview.shared-fileees.workers.dev",nocase; classtype:attempted-recon; sid:200001725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-based-shared.line-assets.workers.dev",nocase; classtype:attempted-recon; sid:200001726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-documents.member-datings.workers.dev",nocase; classtype:attempted-recon; sid:200001727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-owa-cyncrons.abeuac.workers.dev",nocase; classtype:attempted-recon; sid:200001728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-preview-doc.zip-sneidjer.workers.dev",nocase; classtype:attempted-recon; sid:200001729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-preview-shared.auth-sahidoc.workers.dev",nocase; classtype:attempted-recon; sid:200001730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-private-project.progrest-auth.workers.dev",nocase; classtype:attempted-recon; sid:200001731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-project-august.media-love.workers.dev",nocase; classtype:attempted-recon; sid:200001732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-project-folder.files-progress.workers.dev",nocase; classtype:attempted-recon; sid:200001733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-publish-document.drop-documentts.workers.dev",nocase; classtype:attempted-recon; sid:200001734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-share-file-drive.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-share-file-drive.web.app",nocase; classtype:attempted-recon; sid:200001736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-shared-folder.preg-remit.workers.dev",nocase; classtype:attempted-recon; sid:200001737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-shared-preview.pre-signen.workers.dev",nocase; classtype:attempted-recon; sid:200001738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-storage.files-recruitments.workers.dev",nocase; classtype:attempted-recon; sid:200001739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-ways-document.confidednt-auth.workers.dev",nocase; classtype:attempted-recon; sid:200001740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud.onedrivees.workers.dev",nocase; classtype:attempted-recon; sid:200001741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud.onlineapp.rest",nocase; classtype:attempted-recon; sid:200001742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud102.hostgator.com",nocase; classtype:attempted-recon; sid:200001743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloudcomputing.nn1k.in",nocase; classtype:attempted-recon; sid:200001744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clouddoc-authorize.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloudi.sitea.workers.dev",nocase; classtype:attempted-recon; sid:200001746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clrygszfio.duckdns.org",nocase; classtype:attempted-recon; sid:200001747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clt1432536.bmetrack.com",nocase; classtype:attempted-recon; sid:200001748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clt1448359.bmetrack.com",nocase; classtype:attempted-recon; sid:200001749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clubeamigosdopedrosegundo.com.br",nocase; classtype:attempted-recon; sid:200001750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cmtrairi.ce.gov.br",nocase; classtype:attempted-recon; sid:200001751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cmuwezdona.duckdns.org",nocase; classtype:attempted-recon; sid:200001752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cndlaserinstitute.com",nocase; classtype:attempted-recon; sid:200001753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cner283829.odoo.com",nocase; classtype:attempted-recon; sid:200001754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cnewrtjqob.duckdns.org",nocase; classtype:attempted-recon; sid:200001755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cnfrmacn.hprusak.workers.dev",nocase; classtype:attempted-recon; sid:200001756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cny-shopee.blogspot.com",nocase; classtype:attempted-recon; sid:200001757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"co97467.tmweb.ru",nocase; classtype:attempted-recon; sid:200001758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coachtrainer.ru",nocase; classtype:attempted-recon; sid:200001759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coba.tabalongkab.go.id",nocase; classtype:attempted-recon; sid:200001760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cocoandlucas.com.au",nocase; classtype:attempted-recon; sid:200001761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coda-sshop.duckdns.org",nocase; classtype:attempted-recon; sid:200001762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"codasshop.fstart66.tk",nocase; classtype:attempted-recon; sid:200001763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"code-douanes.chouaibi-developer.tn",nocase; classtype:attempted-recon; sid:200001764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"codepasta.app",nocase; classtype:attempted-recon; sid:200001765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coin98n.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coin98n.web.app",nocase; classtype:attempted-recon; sid:200001767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinbase-phishing.lucasong5.repl.co",nocase; classtype:attempted-recon; sid:200001768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinbasedefi.club",nocase; classtype:attempted-recon; sid:200001769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinbasedefi.net",nocase; classtype:attempted-recon; sid:200001770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinbazer.com",nocase; classtype:attempted-recon; sid:200001771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coingecko.nl",nocase; classtype:attempted-recon; sid:200001772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinpayu-adres.blogspot.com",nocase; classtype:attempted-recon; sid:200001773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinssolutionrectification.com",nocase; classtype:attempted-recon; sid:200001774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cointradingsolution.net",nocase; classtype:attempted-recon; sid:200001775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinwin.vip",nocase; classtype:attempted-recon; sid:200001776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coiognline.net",nocase; classtype:attempted-recon; sid:200001777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cokielomiez.xyz",nocase; classtype:attempted-recon; sid:200001778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"colcentralnew.procesardatos.com",nocase; classtype:attempted-recon; sid:200001779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cold-frog-0180.on.fleek.co",nocase; classtype:attempted-recon; sid:200001780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cold-king-e857.marilyn.workers.dev",nocase; classtype:attempted-recon; sid:200001781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"colislaposte.wonstasite.com",nocase; classtype:attempted-recon; sid:200001782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"colorpsychology.co",nocase; classtype:attempted-recon; sid:200001783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"colvillellc.com",nocase; classtype:attempted-recon; sid:200001784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"comerica-rfy.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"comerica-rfy.web.app",nocase; classtype:attempted-recon; sid:200001786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"commerzbank-phototan76z2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"commerzbank-phototan76z2.web.app",nocase; classtype:attempted-recon; sid:200001788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"communauteaserm.com",nocase; classtype:attempted-recon; sid:200001789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"complementosicop.com",nocase; classtype:attempted-recon; sid:200001790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"completewildlifeservices.com",nocase; classtype:attempted-recon; sid:200001791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"complianceassistance.us",nocase; classtype:attempted-recon; sid:200001792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"comprind.com.br",nocase; classtype:attempted-recon; sid:200001793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"compte-disneyplus.fr",nocase; classtype:attempted-recon; sid:200001794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"compuclon.com",nocase; classtype:attempted-recon; sid:200001795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"comunidademasculina.com",nocase; classtype:attempted-recon; sid:200001796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"conceive-and-believe.my.id",nocase; classtype:attempted-recon; sid:200001797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"concourstirageausort-leboncoiin.gq",nocase; classtype:attempted-recon; sid:200001798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"concposst.ddns.net",nocase; classtype:attempted-recon; sid:200001799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"conf.chuuu.workers.dev",nocase; classtype:attempted-recon; sid:200001800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"configsure-admin.zzux.com",nocase; classtype:attempted-recon; sid:200001801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confimarusergali.userenline.repl.co",nocase; classtype:attempted-recon; sid:200001802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confir-banco.verificaraccoun.repl.co",nocase; classtype:attempted-recon; sid:200001803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confirm-your-identity.epizy.com",nocase; classtype:attempted-recon; sid:200001804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confirmacion.confimac.repl.co",nocase; classtype:attempted-recon; sid:200001805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confirmaciondecuenta-c30e.czemarkojo.workers.dev",nocase; classtype:attempted-recon; sid:200001806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confirmacions.confirmacione.repl.co",nocase; classtype:attempted-recon; sid:200001807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confirmar2022.repl.co",nocase; classtype:attempted-recon; sid:200001808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confirmfalabeco.x10.mx",nocase; classtype:attempted-recon; sid:200001809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confirmservice.co.vu",nocase; classtype:attempted-recon; sid:200001810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confirmusernameandpassword.d1ejrcnhozv7ce.amplifyapp.com",nocase; classtype:attempted-recon; sid:200001811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confoirmation-getstarted-g6fr5gf6grtg5656fg5.ga",nocase; classtype:attempted-recon; sid:200001812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confoirmation-getstarted-gf65g6fh5652f.ml",nocase; classtype:attempted-recon; sid:200001813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confrim-account-pages.epizy.com",nocase; classtype:attempted-recon; sid:200001814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connect-au-login.auupdat.top",nocase; classtype:attempted-recon; sid:200001815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connect-au-login.auupdate.top",nocase; classtype:attempted-recon; sid:200001816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connect-ecosystem.com",nocase; classtype:attempted-recon; sid:200001817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connect.defisupportapi.com",nocase; classtype:attempted-recon; sid:200001818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connectcentral.biz",nocase; classtype:attempted-recon; sid:200001819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connectme-collab.land",nocase; classtype:attempted-recon; sid:200001820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connectthewallet.com",nocase; classtype:attempted-recon; sid:200001821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connectwalletvalidator.rf.gd",nocase; classtype:attempted-recon; sid:200001822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connexion-0e.boxmode.io",nocase; classtype:attempted-recon; sid:200001823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connosotros.edivareletricista.com",nocase; classtype:attempted-recon; sid:200001824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connt-w-t.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connt-w-t.web.app",nocase; classtype:attempted-recon; sid:200001826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"consegnacarta.com",nocase; classtype:attempted-recon; sid:200001827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"consent.clarosgvas.mobicare.com.br",nocase; classtype:attempted-recon; sid:200001828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"considerpublisher.com",nocase; classtype:attempted-recon; sid:200001829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"console-16397.web.app",nocase; classtype:attempted-recon; sid:200001830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"construction-document.kit-ouath.workers.dev",nocase; classtype:attempted-recon; sid:200001831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"consult4magalz.com",nocase; classtype:attempted-recon; sid:200001832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"consultafacil24horas.com",nocase; classtype:attempted-recon; sid:200001833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contabilidaderabello.com.br",nocase; classtype:attempted-recon; sid:200001834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contact-noreply003-my-cheetah-website-1.cheetah.builderall.com",nocase; classtype:attempted-recon; sid:200001835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"continentalproducts.com",nocase; classtype:attempted-recon; sid:200001836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contionsintermatcc.ecuadointerhomw.repl.co",nocase; classtype:attempted-recon; sid:200001837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contract-mps.me",nocase; classtype:attempted-recon; sid:200001838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contractwebsite.live",nocase; classtype:attempted-recon; sid:200001839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"controlpanel00180722.server1.trinchera.dev",nocase; classtype:attempted-recon; sid:200001840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"convalidanumero.com",nocase; classtype:attempted-recon; sid:200001841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cooinprime.com",nocase; classtype:attempted-recon; sid:200001842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cool-moon-9292.on.fleek.co",nocase; classtype:attempted-recon; sid:200001843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cool-sun-00a2.wessternroade.workers.dev",nocase; classtype:attempted-recon; sid:200001844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coolenormousalgorithms.ultralubhold.repl.co",nocase; classtype:attempted-recon; sid:200001845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter15689135.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter15689135.web.app",nocase; classtype:attempted-recon; sid:200001847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter23178920.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter23178920.web.app",nocase; classtype:attempted-recon; sid:200001849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter23424134.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter45647823.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter56168921.web.app",nocase; classtype:attempted-recon; sid:200001852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter56689173.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter65189223.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter65189223.web.app",nocase; classtype:attempted-recon; sid:200001855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter8513589522.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter8513589522.web.app",nocase; classtype:attempted-recon; sid:200001857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter85156827.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter85156827.web.app",nocase; classtype:attempted-recon; sid:200001859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter856135254.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter856135254.web.app",nocase; classtype:attempted-recon; sid:200001861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter98123721.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-helpcenter98123721.web.app",nocase; classtype:attempted-recon; sid:200001863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-support213479413.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-support213479413.web.app",nocase; classtype:attempted-recon; sid:200001865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-support89013719.web.app",nocase; classtype:attempted-recon; sid:200001866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-supportcenter4178769.web.app",nocase; classtype:attempted-recon; sid:200001867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-supportcenter5518741.web.app",nocase; classtype:attempted-recon; sid:200001868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-supportcenter5618237.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-supportcenter5618237.web.app",nocase; classtype:attempted-recon; sid:200001870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-supportcenter7562813.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-supportcenter7562813.web.app",nocase; classtype:attempted-recon; sid:200001872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-supportcenter8731639.web.app",nocase; classtype:attempted-recon; sid:200001873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-supportcenter9134833.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"copyright-supportcenter9134833.web.app",nocase; classtype:attempted-recon; sid:200001875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coradecora.com.br",nocase; classtype:attempted-recon; sid:200001876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"core.pdf-asset.workers.dev",nocase; classtype:attempted-recon; sid:200001877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"corporhonline.com.br",nocase; classtype:attempted-recon; sid:200001878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"correctionwallet.com",nocase; classtype:attempted-recon; sid:200001879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"correos-es.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"correos-es.web.app",nocase; classtype:attempted-recon; sid:200001881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"correos-package.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"correos-package.web.app",nocase; classtype:attempted-recon; sid:200001883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coruscating-gecko-178b68.netlify.app",nocase; classtype:attempted-recon; sid:200001884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cosgtradeex.com",nocase; classtype:attempted-recon; sid:200001885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"costaricaprueba.webcindario.com",nocase; classtype:attempted-recon; sid:200001886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cottonwooddentalg.nimbusweb.me",nocase; classtype:attempted-recon; sid:200001887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"courseedge.in",nocase; classtype:attempted-recon; sid:200001888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"courtcase.co.in",nocase; classtype:attempted-recon; sid:200001889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cp.digitalprocurements.co.uk",nocase; classtype:attempted-recon; sid:200001890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cpanel.authenticate0.workers.dev",nocase; classtype:attempted-recon; sid:200001891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cpanel10wh.bkk1.cloud.z.com",nocase; classtype:attempted-recon; sid:200001892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cphamembers.co.za",nocase; classtype:attempted-recon; sid:200001893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cpmassistcom-b97500.ingress-earth.ewp.live",nocase; classtype:attempted-recon; sid:200001894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cqgsbxn.cf",nocase; classtype:attempted-recon; sid:200001895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cqmuco.myportfolio.com",nocase; classtype:attempted-recon; sid:200001896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cqmuco4afa.myportfolio.com",nocase; classtype:attempted-recon; sid:200001897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cqrn3-piaaa-aaaad-qdcoq-cai.ic.fleek.co",nocase; classtype:attempted-recon; sid:200001898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cratuslio.synology.me",nocase; classtype:attempted-recon; sid:200001899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crazy-taxi.de",nocase; classtype:attempted-recon; sid:200001900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativeani.com",nocase; classtype:attempted-recon; sid:200001901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"credicarliogininter.com",nocase; classtype:attempted-recon; sid:200001902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"credit0digital.convenioaprobado-2022.top",nocase; classtype:attempted-recon; sid:200001903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditagricole-sudrhonealpes.blogspot.ba",nocase; classtype:attempted-recon; sid:200001904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditagricole-sudrhonealpes.blogspot.com",nocase; classtype:attempted-recon; sid:200001905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditagricole-sudrhonealpes.blogspot.ro",nocase; classtype:attempted-recon; sid:200001906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditdunord-session.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditdunord-session.web.app",nocase; classtype:attempted-recon; sid:200001908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditiperhabbogratissicuro100.blogspot.it",nocase; classtype:attempted-recon; sid:200001909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditsuisse.bluproducts.com.py",nocase; classtype:attempted-recon; sid:200001910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crematoriolitoralsp.com.br",nocase; classtype:attempted-recon; sid:200001911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crgtj.glassesotaku.cn",nocase; classtype:attempted-recon; sid:200001912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cricutcomregister.com",nocase; classtype:attempted-recon; sid:200001913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"criminaldistinctsearchengine.0nlinegalicia.repl.co",nocase; classtype:attempted-recon; sid:200001914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crimson-dawn-bc08.bizd134.workers.dev",nocase; classtype:attempted-recon; sid:200001915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crimson-snowflake-5a43.anyrag8021015.workers.dev",nocase; classtype:attempted-recon; sid:200001916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crimson-truth-b81b.jefferyscatering1615.workers.dev",nocase; classtype:attempted-recon; sid:200001917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crm-galicia.snet.ar",nocase; classtype:attempted-recon; sid:200001918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crm.epochfinancialus.com",nocase; classtype:attempted-recon; sid:200001919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cromexa.com",nocase; classtype:attempted-recon; sid:200001920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crossoverbrazil.com",nocase; classtype:attempted-recon; sid:200001921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crypto-trustpads.io",nocase; classtype:attempted-recon; sid:200001922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptoassetrecovery.com",nocase; classtype:attempted-recon; sid:200001923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptocar.biz",nocase; classtype:attempted-recon; sid:200001924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptocarspro.com",nocase; classtype:attempted-recon; sid:200001925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptocsgo.com",nocase; classtype:attempted-recon; sid:200001926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptomigration.best",nocase; classtype:attempted-recon; sid:200001927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptonvest.com",nocase; classtype:attempted-recon; sid:200001928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptoplanes.top",nocase; classtype:attempted-recon; sid:200001929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cs.shallwemeetup.com",nocase; classtype:attempted-recon; sid:200001930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cs18723.tmweb.ru",nocase; classtype:attempted-recon; sid:200001931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"csdb.82197.cn",nocase; classtype:attempted-recon; sid:200001932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"csdv.79272.cn",nocase; classtype:attempted-recon; sid:200001933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"csgofloat.com.cm",nocase; classtype:attempted-recon; sid:200001934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"csgofloat.com.vc",nocase; classtype:attempted-recon; sid:200001935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"csgofloat.de",nocase; classtype:attempted-recon; sid:200001936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"csylum.pl",nocase; classtype:attempted-recon; sid:200001937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ctbahcopmy.duckdns.org",nocase; classtype:attempted-recon; sid:200001938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ctyzlecpxb.duckdns.org",nocase; classtype:attempted-recon; sid:200001939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cu33490.tmweb.ru",nocase; classtype:attempted-recon; sid:200001940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cubbychase5k10k.org",nocase; classtype:attempted-recon; sid:200001941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cucukposa.co.vu",nocase; classtype:attempted-recon; sid:200001942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cuenta.usrgalicia.repl.co",nocase; classtype:attempted-recon; sid:200001943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cuentasfreefire.club",nocase; classtype:attempted-recon; sid:200001944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cunamutualconnect.com",nocase; classtype:attempted-recon; sid:200001945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cupo-enlinea.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cupomax.hostfree.pw",nocase; classtype:attempted-recon; sid:200001947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cupomdescontoluiza.xyz",nocase; classtype:attempted-recon; sid:200001948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cupos-clientes.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cupos-clientes.web.app",nocase; classtype:attempted-recon; sid:200001950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cupos-credito.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cupos-credito.web.app",nocase; classtype:attempted-recon; sid:200001952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"curly-field-bd79.wareareto.workers.dev",nocase; classtype:attempted-recon; sid:200001953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"curly-paper-7426.m-2-31.workers.dev",nocase; classtype:attempted-recon; sid:200001954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"curly-wave-9189.on.fleek.co",nocase; classtype:attempted-recon; sid:200001955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currently-att-106799teamservice.square.site",nocase; classtype:attempted-recon; sid:200001956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"curtismscaparrotti03.mfs.gg",nocase; classtype:attempted-recon; sid:200001957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"custom-gift.ca",nocase; classtype:attempted-recon; sid:200001958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"customer-p.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"customer-p.web.app",nocase; classtype:attempted-recon; sid:200001960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"customersde-support24.de",nocase; classtype:attempted-recon; sid:200001961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cuteworrisomecleaninstallbrou.brocol.repl.co",nocase; classtype:attempted-recon; sid:200001962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cuvukisa.co.vu",nocase; classtype:attempted-recon; sid:200001963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cvbnmmnbvcxcvjhgfhgc.weeblysite.com",nocase; classtype:attempted-recon; sid:200001964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cvddd.hbqzyy.cn",nocase; classtype:attempted-recon; sid:200001965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cvfb.exdbimw.cn",nocase; classtype:attempted-recon; sid:200001966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cvsr1.hyperphp.com",nocase; classtype:attempted-recon; sid:200001967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cvx-100122.weeblysite.com",nocase; classtype:attempted-recon; sid:200001968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cwar9.enviodecontrato.digital",nocase; classtype:attempted-recon; sid:200001969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cwaxosmhse.duckdns.org",nocase; classtype:attempted-recon; sid:200001970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cwbwka.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cwbwka.web.app",nocase; classtype:attempted-recon; sid:200001972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cx48722.tmweb.ru",nocase; classtype:attempted-recon; sid:200001973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cx62668.tmweb.ru",nocase; classtype:attempted-recon; sid:200001974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cycover.co.uk",nocase; classtype:attempted-recon; sid:200001975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cz0874.webflow.io",nocase; classtype:attempted-recon; sid:200001976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"czvon.4fan.cz",nocase; classtype:attempted-recon; sid:200001977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"czxvd.huanyinmedia.cn",nocase; classtype:attempted-recon; sid:200001978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d.app01988.xyz",nocase; classtype:attempted-recon; sid:200001979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d.app95789.top",nocase; classtype:attempted-recon; sid:200001980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d.edgecryptobf.xyz",nocase; classtype:attempted-recon; sid:200001981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d.jxted.top",nocase; classtype:attempted-recon; sid:200001982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d.oftde.top",nocase; classtype:attempted-recon; sid:200001983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d2aae6a6.srvr-cloudmail-srvr675eu6r.pages.dev",nocase; classtype:attempted-recon; sid:200001984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d2kyz7.hyperphp.com",nocase; classtype:attempted-recon; sid:200001985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d4303943-31.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d4303943-31.web.app",nocase; classtype:attempted-recon; sid:200001987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"daatwailvv.duckdns.org",nocase; classtype:attempted-recon; sid:200001988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dabntrptkd.duckdns.org",nocase; classtype:attempted-recon; sid:200001989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dacetnroj-gemes.com",nocase; classtype:attempted-recon; sid:200001990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"daiichi-gakki.co.jp",nocase; classtype:attempted-recon; sid:200001991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dailygames24.com",nocase; classtype:attempted-recon; sid:200001992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dainikjeevan.com",nocase; classtype:attempted-recon; sid:200001993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"daiykxrzdt.duckdns.org",nocase; classtype:attempted-recon; sid:200001994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dajmrzasvf.duckdns.org",nocase; classtype:attempted-recon; sid:200001995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dakshinanchal24.com",nocase; classtype:attempted-recon; sid:200001996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"damp-dawn-51e1.nicholasa.workers.dev",nocase; classtype:attempted-recon; sid:200001997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"damp-f43e.recovery-page-secur.workers.dev",nocase; classtype:attempted-recon; sid:200001998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"damuxxoyhv.duckdns.org",nocase; classtype:attempted-recon; sid:200001999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dandeindomain4500.page.link",nocase; classtype:attempted-recon; sid:200002000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dangol-v2.web.app",nocase; classtype:attempted-recon; sid:200002001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapaiduo.com",nocase; classtype:attempted-recon; sid:200002002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapp.activationaccess.com",nocase; classtype:attempted-recon; sid:200002003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapp.busta.gg",nocase; classtype:attempted-recon; sid:200002004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappai.net",nocase; classtype:attempted-recon; sid:200002005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappauto.top",nocase; classtype:attempted-recon; sid:200002006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappbridgeprotocol.com",nocase; classtype:attempted-recon; sid:200002007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappbuilder.org",nocase; classtype:attempted-recon; sid:200002008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappconnector.co",nocase; classtype:attempted-recon; sid:200002009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapplinksync.com",nocase; classtype:attempted-recon; sid:200002010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappnetsync.com",nocase; classtype:attempted-recon; sid:200002011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapps-connect-apps.com",nocase; classtype:attempted-recon; sid:200002012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapps-live.web.app",nocase; classtype:attempted-recon; sid:200002013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapps-mobilev1.github.io",nocase; classtype:attempted-recon; sid:200002014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapps-rewards.com",nocase; classtype:attempted-recon; sid:200002015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapps-web-synchroznize.pages.dev",nocase; classtype:attempted-recon; sid:200002016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappschainencrypt.co",nocase; classtype:attempted-recon; sid:200002017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappssynch.win",nocase; classtype:attempted-recon; sid:200002018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappsync.nl",nocase; classtype:attempted-recon; sid:200002019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappsync.tk",nocase; classtype:attempted-recon; sid:200002020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapptoolsolution.com",nocase; classtype:attempted-recon; sid:200002021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dar.kupabaruak.workers.dev",nocase; classtype:attempted-recon; sid:200002022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dark-boat.media-peoplle.workers.dev",nocase; classtype:attempted-recon; sid:200002023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dasse.top",nocase; classtype:attempted-recon; sid:200002024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"datacoresystems.com",nocase; classtype:attempted-recon; sid:200002025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"date-update-ups.com",nocase; classtype:attempted-recon; sid:200002026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"davincipeluqueros.com",nocase; classtype:attempted-recon; sid:200002027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dawert675432.liveblog365.com",nocase; classtype:attempted-recon; sid:200002028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dawn-river-3b54.marylands.workers.dev",nocase; classtype:attempted-recon; sid:200002029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dawn-shadow-6508.on.fleek.co",nocase; classtype:attempted-recon; sid:200002030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dawno.ciwumugiasda.workers.dev",nocase; classtype:attempted-recon; sid:200002031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"daycoval.contrato.srv.br",nocase; classtype:attempted-recon; sid:200002032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"daycoval.facildepagar.com.br",nocase; classtype:attempted-recon; sid:200002033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"daytrading-wallet.net",nocase; classtype:attempted-recon; sid:200002034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"db218.blogspot.com",nocase; classtype:attempted-recon; sid:200002035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dbcsugddqo.duckdns.org",nocase; classtype:attempted-recon; sid:200002036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dbdf.lknjdfk.cn",nocase; classtype:attempted-recon; sid:200002037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dbdfh.67917.cn",nocase; classtype:attempted-recon; sid:200002038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dbfn.81932.cn",nocase; classtype:attempted-recon; sid:200002039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dbng.63186.cn",nocase; classtype:attempted-recon; sid:200002040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dbs-singaporre-online-digital-login.web-no.com",nocase; classtype:attempted-recon; sid:200002041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dbs-singaporre-online-digital-web.b-cdn.net",nocase; classtype:attempted-recon; sid:200002042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dcbtkepdeb.duckdns.org",nocase; classtype:attempted-recon; sid:200002043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dctitan.com",nocase; classtype:attempted-recon; sid:200002044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dd90001.github.io",nocase; classtype:attempted-recon; sid:200002045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ddbanorte2022.com",nocase; classtype:attempted-recon; sid:200002046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ddfgh.npdmsro.cn",nocase; classtype:attempted-recon; sid:200002047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"de22c9kukppr.clickfunnels.com",nocase; classtype:attempted-recon; sid:200002048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dearrundown.us727win.repl.co",nocase; classtype:attempted-recon; sid:200002049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deborahholland.net",nocase; classtype:attempted-recon; sid:200002050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"decenlretends.com",nocase; classtype:attempted-recon; sid:200002051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"decentralizefix.com",nocase; classtype:attempted-recon; sid:200002052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"decentrskal-games-on.com",nocase; classtype:attempted-recon; sid:200002053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"decrocheur.com",nocase; classtype:attempted-recon; sid:200002054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defi-aavev3.cloud",nocase; classtype:attempted-recon; sid:200002055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defi-aavev3.club",nocase; classtype:attempted-recon; sid:200002056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defi-aavev3.info",nocase; classtype:attempted-recon; sid:200002057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defi-connect.net",nocase; classtype:attempted-recon; sid:200002058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defi-go.me",nocase; classtype:attempted-recon; sid:200002059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defi-mining.live",nocase; classtype:attempted-recon; sid:200002060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defiblockchain-node.com",nocase; classtype:attempted-recon; sid:200002061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deficonfigure.com",nocase; classtype:attempted-recon; sid:200002062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deficonnects.net",nocase; classtype:attempted-recon; sid:200002063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defierror-reauth.org",nocase; classtype:attempted-recon; sid:200002064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defikingdoms.com",nocase; classtype:attempted-recon; sid:200002065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defilo.io",nocase; classtype:attempted-recon; sid:200002066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defiportal.alphaacetech.com",nocase; classtype:attempted-recon; sid:200002067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defiprotocol.pages.dev",nocase; classtype:attempted-recon; sid:200002068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defiwalletsyn.com",nocase; classtype:attempted-recon; sid:200002069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"degerkromaj.com.tr",nocase; classtype:attempted-recon; sid:200002070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deguidesrv-customers.de",nocase; classtype:attempted-recon; sid:200002071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deintiershop.com",nocase; classtype:attempted-recon; sid:200002072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deinworks.com",nocase; classtype:attempted-recon; sid:200002073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"delbarriovalpo.cl",nocase; classtype:attempted-recon; sid:200002074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"delezhen.mashalezhen.com",nocase; classtype:attempted-recon; sid:200002075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"delhiescort69.com",nocase; classtype:attempted-recon; sid:200002076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"delicate-bonus-7166.on.fleek.co",nocase; classtype:attempted-recon; sid:200002077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"delicate-bush-0904.rcvrypahsajk.workers.dev",nocase; classtype:attempted-recon; sid:200002078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"delicate-dream.p54drdar.workers.dev",nocase; classtype:attempted-recon; sid:200002079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dellverollx6polska.delldoctawplnds3.pl",nocase; classtype:attempted-recon; sid:200002080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deltaswap.ru",nocase; classtype:attempted-recon; sid:200002081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deluxify-ff527.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deluxify-ff527.web.app",nocase; classtype:attempted-recon; sid:200002083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"delvin.com.br",nocase; classtype:attempted-recon; sid:200002084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demo.360degreeinfo.net",nocase; classtype:attempted-recon; sid:200002085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demo.bookbeauty.com",nocase; classtype:attempted-recon; sid:200002086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demo.bradescocontrol.vertitecnologia.com.br",nocase; classtype:attempted-recon; sid:200002087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demo.giamso.com.sg",nocase; classtype:attempted-recon; sid:200002088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demo2.cloudwp.dev",nocase; classtype:attempted-recon; sid:200002089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demovp.cruisesmekongriver.net",nocase; classtype:attempted-recon; sid:200002090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deqwest.pl",nocase; classtype:attempted-recon; sid:200002091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"derinasekdertinr.com",nocase; classtype:attempted-recon; sid:200002092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"desarrolloturisticopartidordelsol.com",nocase; classtype:attempted-recon; sid:200002093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"desk-id-78739.herokuapp.com",nocase; classtype:attempted-recon; sid:200002094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deskorganize.com",nocase; classtype:attempted-recon; sid:200002095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"desplugado.com",nocase; classtype:attempted-recon; sid:200002096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"detailsconfirminfo.com",nocase; classtype:attempted-recon; sid:200002097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"detailurp.cl",nocase; classtype:attempted-recon; sid:200002098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"determinedallprogramminglanguage.presenteapoepa.repl.co",nocase; classtype:attempted-recon; sid:200002099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deutcher.easy.co",nocase; classtype:attempted-recon; sid:200002100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deutschepost.paymentservices.com.do",nocase; classtype:attempted-recon; sid:200002101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-creditlimit78.pantheonsite.io",nocase; classtype:attempted-recon; sid:200002102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-mqpnrt.pantheonsite.io",nocase; classtype:attempted-recon; sid:200002103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-sisitrrrrrr.pantheonsite.io",nocase; classtype:attempted-recon; sid:200002104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-valleverde.tk",nocase; classtype:attempted-recon; sid:200002105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev.exitwabashandlake.com",nocase; classtype:attempted-recon; sid:200002106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev.pagseguro.qisar.com.br",nocase; classtype:attempted-recon; sid:200002107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev.technotackle.com",nocase; classtype:attempted-recon; sid:200002108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev.treeseed.org",nocase; classtype:attempted-recon; sid:200002109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev3329.d19t4bx41gv5mq.amplifyapp.com",nocase; classtype:attempted-recon; sid:200002110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev5924.dxxsgb6hsq3ex.amplifyapp.com",nocase; classtype:attempted-recon; sid:200002111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev7029.dxxsgb6hsq3ex.amplifyapp.com",nocase; classtype:attempted-recon; sid:200002112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"development-admin-10002000300045678910133.tk",nocase; classtype:attempted-recon; sid:200002113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"development-admin-10002000300045678910153.tk",nocase; classtype:attempted-recon; sid:200002114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"development-admin-10002000300045678910154.tk",nocase; classtype:attempted-recon; sid:200002115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"development-admin-10002000300045678910161.tk",nocase; classtype:attempted-recon; sid:200002116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"development-admin-10002000300045678910163.tk",nocase; classtype:attempted-recon; sid:200002117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"development-admin-10002000300045678910183.tk",nocase; classtype:attempted-recon; sid:200002118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"development-admin-10002000300045678910185.tk",nocase; classtype:attempted-recon; sid:200002119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"development-admin-10002000300045678910186.tk",nocase; classtype:attempted-recon; sid:200002120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"development-admin-10002000300045678910187.tk",nocase; classtype:attempted-recon; sid:200002121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"development-admin-10002000300045678910189.tk",nocase; classtype:attempted-recon; sid:200002122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"development-admin-10002000300045678920031.tk",nocase; classtype:attempted-recon; sid:200002123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"development-admin-10002000300045678920032.tk",nocase; classtype:attempted-recon; sid:200002124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"development-admin-10002000300045678920033.tk",nocase; classtype:attempted-recon; sid:200002125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"development-admin-10002000300045678920034.tk",nocase; classtype:attempted-recon; sid:200002126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"development.aisecureme.com",nocase; classtype:attempted-recon; sid:200002127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"development.omefyi.com",nocase; classtype:attempted-recon; sid:200002128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfbf.ddszyy.cn",nocase; classtype:attempted-recon; sid:200002129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfbf.mzmld.cn",nocase; classtype:attempted-recon; sid:200002130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfbfd.75263.cn",nocase; classtype:attempted-recon; sid:200002131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfcsa56.hyperphp.com",nocase; classtype:attempted-recon; sid:200002132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfdf.81671.cn",nocase; classtype:attempted-recon; sid:200002133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfdn.qinzuihou.cn",nocase; classtype:attempted-recon; sid:200002134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dffe.kkqqk.cn",nocase; classtype:attempted-recon; sid:200002135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dffgg.cxfzpm.cn",nocase; classtype:attempted-recon; sid:200002136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dffgg.hsgfchffk.cn",nocase; classtype:attempted-recon; sid:200002137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dffgg.qazyocv.cn",nocase; classtype:attempted-recon; sid:200002138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dffgg.qing18.cn",nocase; classtype:attempted-recon; sid:200002139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dffgh.gop5om.cn",nocase; classtype:attempted-recon; sid:200002140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dffgh.vj2ujg.cn",nocase; classtype:attempted-recon; sid:200002141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dffs-drsfer-ftreeryt.agilecrm.com",nocase; classtype:attempted-recon; sid:200002142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgdsjhnfgjnaedzh.x10.mx",nocase; classtype:attempted-recon; sid:200002143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgfgh.xuduojx.cn",nocase; classtype:attempted-recon; sid:200002144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgg.55tcvko.cn",nocase; classtype:attempted-recon; sid:200002145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgg.dkbcdbg.cn",nocase; classtype:attempted-recon; sid:200002146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgg.hq-smart.cn",nocase; classtype:attempted-recon; sid:200002147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgg.wc1xuj.cn",nocase; classtype:attempted-recon; sid:200002148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfggh.5ufl98g.cn",nocase; classtype:attempted-recon; sid:200002149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfggh.cljtcj.cn",nocase; classtype:attempted-recon; sid:200002150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfggh.great2015.cn",nocase; classtype:attempted-recon; sid:200002151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfggh.hsgfchffw.cn",nocase; classtype:attempted-recon; sid:200002152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfggh.htkvjwluwx.cn",nocase; classtype:attempted-recon; sid:200002153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfggh.hvkpzdk.cn",nocase; classtype:attempted-recon; sid:200002154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfggh.k2vhkjp.cn",nocase; classtype:attempted-recon; sid:200002155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfggh.oenqllk.cn",nocase; classtype:attempted-recon; sid:200002156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfggh.s6uddv.cn",nocase; classtype:attempted-recon; sid:200002157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgghh.1l8ls9j.cn",nocase; classtype:attempted-recon; sid:200002158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgh.amtuijguang-0031.cn",nocase; classtype:attempted-recon; sid:200002159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgh.hhaaq.cn",nocase; classtype:attempted-recon; sid:200002160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgh.r8w81l.cn",nocase; classtype:attempted-recon; sid:200002161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgh.rrffr.cn",nocase; classtype:attempted-recon; sid:200002162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgh.ttok533.cn",nocase; classtype:attempted-recon; sid:200002163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgh.weiyi-scm.cn",nocase; classtype:attempted-recon; sid:200002164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgh5678597.confirmacy.repl.co",nocase; classtype:attempted-recon; sid:200002165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfghfdrtygfdbdsdfghbvcxdfghgfdsdfgt.weeblysite.com",nocase; classtype:attempted-recon; sid:200002166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfghh.0k4joxl.cn",nocase; classtype:attempted-recon; sid:200002167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfghh.bpzdzc.cn",nocase; classtype:attempted-recon; sid:200002168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfghh.htkvjwlgahj.cn",nocase; classtype:attempted-recon; sid:200002169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfghh.htkvjwlu.cn",nocase; classtype:attempted-recon; sid:200002170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfghh.kooszuh.cn",nocase; classtype:attempted-recon; sid:200002171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfghh.wdgdjgmukptja.cn",nocase; classtype:attempted-recon; sid:200002172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfghh.wuyueducation.cn",nocase; classtype:attempted-recon; sid:200002173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfghh.yangguanglaoren.cn",nocase; classtype:attempted-recon; sid:200002174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfghj.lyuvkgs.cn",nocase; classtype:attempted-recon; sid:200002175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfghj.wdgdjgmukpmjw.cn",nocase; classtype:attempted-recon; sid:200002176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfghj.xfzrano.cn",nocase; classtype:attempted-recon; sid:200002177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfghj.z0p6kib.cn",nocase; classtype:attempted-recon; sid:200002178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfghjj.kstrlst.cn",nocase; classtype:attempted-recon; sid:200002179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfght.nnhhn.cn",nocase; classtype:attempted-recon; sid:200002180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfhhj.ixhwkrg.cn",nocase; classtype:attempted-recon; sid:200002181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfhjj.irg70nt.cn",nocase; classtype:attempted-recon; sid:200002182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfnsbjgwiq.duckdns.org",nocase; classtype:attempted-recon; sid:200002183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfs345344232.chindyy.repl.co",nocase; classtype:attempted-recon; sid:200002184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfskv.com",nocase; classtype:attempted-recon; sid:200002185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfsxz.lokecel.cn",nocase; classtype:attempted-recon; sid:200002186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dftojc.web.app",nocase; classtype:attempted-recon; sid:200002187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgb.iljzsgg.cn",nocase; classtype:attempted-recon; sid:200002188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgdh.jbxrmyy.cn",nocase; classtype:attempted-recon; sid:200002189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgdn.tnpfuiq.cn",nocase; classtype:attempted-recon; sid:200002190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgdsrd.ghxrmyy.cn",nocase; classtype:attempted-recon; sid:200002191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgfetpqzja.duckdns.org",nocase; classtype:attempted-recon; sid:200002192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgfoodsnet.myportfolio.com",nocase; classtype:attempted-recon; sid:200002193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dggg.wccm365.cn",nocase; classtype:attempted-recon; sid:200002194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgghj.0xvckxc.cn",nocase; classtype:attempted-recon; sid:200002195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgh.78173.cn",nocase; classtype:attempted-recon; sid:200002196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dghh.rufusecs.cn",nocase; classtype:attempted-recon; sid:200002197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dghhj.kpbx8jt.cn",nocase; classtype:attempted-recon; sid:200002198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dghhj.nqrtppc.cn",nocase; classtype:attempted-recon; sid:200002199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dghj.ubdmgdb.cn",nocase; classtype:attempted-recon; sid:200002200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dghjj.hhxxh.cn",nocase; classtype:attempted-recon; sid:200002201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgtbvrhnbd.duckdns.org",nocase; classtype:attempted-recon; sid:200002202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgthyrdthrds.hostfree.pw",nocase; classtype:attempted-recon; sid:200002203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgtjg.gohanwang.cn",nocase; classtype:attempted-recon; sid:200002204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgu9g3a2kzqx2.cloudfront.net",nocase; classtype:attempted-recon; sid:200002205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgw.soundestlink.com",nocase; classtype:attempted-recon; sid:200002206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgwhju.lncmemf.cn",nocase; classtype:attempted-recon; sid:200002207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dhanushr24.github.io",nocase; classtype:attempted-recon; sid:200002208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dhjjk.htkvjwlgal.cn",nocase; classtype:attempted-recon; sid:200002209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dhlparcel.sps-ocs.co.uk",nocase; classtype:attempted-recon; sid:200002210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"diadfatura5xxx.online",nocase; classtype:attempted-recon; sid:200002211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"diadfatura9xxx.online",nocase; classtype:attempted-recon; sid:200002212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"diankeplaza.com",nocase; classtype:attempted-recon; sid:200002213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"diasrasafricain.diasporasafricaines.org",nocase; classtype:attempted-recon; sid:200002214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dicantrelend.blogspot.com",nocase; classtype:attempted-recon; sid:200002215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"die-post-swiss-id-19782635812.psd2any.com",nocase; classtype:attempted-recon; sid:200002216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"die.post-ch.top",nocase; classtype:attempted-recon; sid:200002217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"digbgcbcnl.duckdns.org",nocase; classtype:attempted-recon; sid:200002218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"digiboxtest.com",nocase; classtype:attempted-recon; sid:200002219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"digital.mps.controllodianagrafici.eu",nocase; classtype:attempted-recon; sid:200002220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dik.dt76zy45no4i.amplifyapp.com",nocase; classtype:attempted-recon; sid:200002221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dikbdxmabn.duckdns.org",nocase; classtype:attempted-recon; sid:200002222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dilscordilgipl.com",nocase; classtype:attempted-recon; sid:200002223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dilscordilgis.com",nocase; classtype:attempted-recon; sid:200002224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dilscordisgix.com",nocase; classtype:attempted-recon; sid:200002225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dircero-smbc.com",nocase; classtype:attempted-recon; sid:200002226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"direccion219191.webcindario.com",nocase; classtype:attempted-recon; sid:200002227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"direct-credit-suisse-91ba7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"direct-credit-suisse-91ba7.web.app",nocase; classtype:attempted-recon; sid:200002229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"direct.smbc.co.jp.bjdrhc.com",nocase; classtype:attempted-recon; sid:200002230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"direct.smbc.co.jp.cpnjn.com",nocase; classtype:attempted-recon; sid:200002231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"direct.smbc.co.jp.itlkj.com",nocase; classtype:attempted-recon; sid:200002232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"directnewszone.com",nocase; classtype:attempted-recon; sid:200002233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"direx.is-great.net",nocase; classtype:attempted-recon; sid:200002234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dirgold.easy.co",nocase; classtype:attempted-recon; sid:200002235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discocock.herokuapp.com",nocase; classtype:attempted-recon; sid:200002236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discoverdhaslkcxfinity1.560f866578.workers.dev",nocase; classtype:attempted-recon; sid:200002237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discretejauntybooleanalgebra.galiciabank1.repl.co",nocase; classtype:attempted-recon; sid:200002238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dishonesteverlastingjavabeans.sauwnaui3.repl.co",nocase; classtype:attempted-recon; sid:200002239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"disponibleahora.assitecac.com",nocase; classtype:attempted-recon; sid:200002240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"disponibleaqui.transparency-tv.com",nocase; classtype:attempted-recon; sid:200002241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"disrupto.xyz",nocase; classtype:attempted-recon; sid:200002242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"distinctivei.com",nocase; classtype:attempted-recon; sid:200002243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"distracted-archimedes.147-50-231-65.plesk.page",nocase; classtype:attempted-recon; sid:200002244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dithiolplu.com",nocase; classtype:attempted-recon; sid:200002245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"divine-mouse-da46.kontor5687.workers.dev",nocase; classtype:attempted-recon; sid:200002246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"divine-sunset.p16t2853.workers.dev",nocase; classtype:attempted-recon; sid:200002247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"divino.zxinomoiszer.workers.dev",nocase; classtype:attempted-recon; sid:200002248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"djcbg.buzz",nocase; classtype:attempted-recon; sid:200002249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"djfn.stmeifeng.cn",nocase; classtype:attempted-recon; sid:200002250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"djfuef.qpclkjf.cn",nocase; classtype:attempted-recon; sid:200002251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkb-daten.act-or.de",nocase; classtype:attempted-recon; sid:200002252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkb-kunden.de",nocase; classtype:attempted-recon; sid:200002253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkb-kundenservice.com",nocase; classtype:attempted-recon; sid:200002254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkb-online.eu",nocase; classtype:attempted-recon; sid:200002255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkbebanking.top",nocase; classtype:attempted-recon; sid:200002256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkkbirahisiang.co.vu",nocase; classtype:attempted-recon; sid:200002257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkksilaban.helpprotections.workers.dev",nocase; classtype:attempted-recon; sid:200002258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkksitamjuntakk.martulangsore.workers.dev",nocase; classtype:attempted-recon; sid:200002259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkuxkxqeex.duckdns.org",nocase; classtype:attempted-recon; sid:200002260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dl.9xu.com",nocase; classtype:attempted-recon; sid:200002261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dlhdeliveryparcele.ga",nocase; classtype:attempted-recon; sid:200002262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dlscord-gifti.com",nocase; classtype:attempted-recon; sid:200002263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dlscord-tm.com",nocase; classtype:attempted-recon; sid:200002264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dlscord3month.com",nocase; classtype:attempted-recon; sid:200002265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dlscordl-giftl.ru",nocase; classtype:attempted-recon; sid:200002266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dlwbfprpef.duckdns.org",nocase; classtype:attempted-recon; sid:200002267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dm2.opq.pa-tarutung.go.id",nocase; classtype:attempted-recon; sid:200002268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dmarket-sell.com",nocase; classtype:attempted-recon; sid:200002269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dmdecors.com",nocase; classtype:attempted-recon; sid:200002270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dmjfdgxxvz.duckdns.org",nocase; classtype:attempted-recon; sid:200002271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dns.w1nnersdata.com",nocase; classtype:attempted-recon; sid:200002272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dns.winnersapuestas.es",nocase; classtype:attempted-recon; sid:200002273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dnss-3982f.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dnss-3982f.web.app",nocase; classtype:attempted-recon; sid:200002275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"do-any-5.https443.org",nocase; classtype:attempted-recon; sid:200002276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"do-any-6.https443.org",nocase; classtype:attempted-recon; sid:200002277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doanmnmmmmbnmdffd.weebly.com",nocase; classtype:attempted-recon; sid:200002278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doc001.onedrive0001.workers.dev",nocase; classtype:attempted-recon; sid:200002279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doccusend.com",nocase; classtype:attempted-recon; sid:200002280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docdrive01060authorizesharingfile.onmicrosoft365.workers.dev",nocase; classtype:attempted-recon; sid:200002281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docfilepropos.myportfolio.com",nocase; classtype:attempted-recon; sid:200002282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doclab-console-auth.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doclab-console-auth.web.app",nocase; classtype:attempted-recon; sid:200002284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.revv.so",nocase; classtype:attempted-recon; sid:200002285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsend.myportfolio.com",nocase; classtype:attempted-recon; sid:200002286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.web.app",nocase; classtype:attempted-recon; sid:200002288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-cloud-secure.piltrimuging.workers.dev",nocase; classtype:attempted-recon; sid:200002289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-clouds.fuconbaetu.workers.dev",nocase; classtype:attempted-recon; sid:200002290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-folder.chat-verify.workers.dev",nocase; classtype:attempted-recon; sid:200002291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-folder.ownyuguestyu.workers.dev",nocase; classtype:attempted-recon; sid:200002292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-folder.shared-reconnecting.workers.dev",nocase; classtype:attempted-recon; sid:200002293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-june.mature-auth.workers.dev",nocase; classtype:attempted-recon; sid:200002294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-private.direct-sustutelue.workers.dev",nocase; classtype:attempted-recon; sid:200002295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-product.rototetiined.workers.dev",nocase; classtype:attempted-recon; sid:200002296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-progress-asset.retupamyte.workers.dev",nocase; classtype:attempted-recon; sid:200002297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-project-june.voicee-love.workers.dev",nocase; classtype:attempted-recon; sid:200002298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-project.secure-count.workers.dev",nocase; classtype:attempted-recon; sid:200002299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-projects.files-auuth.workers.dev",nocase; classtype:attempted-recon; sid:200002300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-shared-folder.date-oauth.workers.dev",nocase; classtype:attempted-recon; sid:200002301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-shared.datings-prev.workers.dev",nocase; classtype:attempted-recon; sid:200002302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-update-progress.shared-filees.workers.dev",nocase; classtype:attempted-recon; sid:200002303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document.lates-proposale.workers.dev",nocase; classtype:attempted-recon; sid:200002304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document.project-shared-adobe.workers.dev",nocase; classtype:attempted-recon; sid:200002305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document.storages-clouds.workers.dev",nocase; classtype:attempted-recon; sid:200002306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document12424.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document1a-34d0d.web.app",nocase; classtype:attempted-recon; sid:200002308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document2c-f4e80.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document2c-f4e80.web.app",nocase; classtype:attempted-recon; sid:200002310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document3b-d779b.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document3b-d779b.web.app",nocase; classtype:attempted-recon; sid:200002312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document3e-e09ee.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document3e-e09ee.web.app",nocase; classtype:attempted-recon; sid:200002314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"documentoprotetto.filedicondivisione-909524fb9aa348b230295a2b7a842c21.workers.dev",nocase; classtype:attempted-recon; sid:200002315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"documents.projects-june.workers.dev",nocase; classtype:attempted-recon; sid:200002316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"documents.shared-authentiicated.workers.dev",nocase; classtype:attempted-recon; sid:200002317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"documents.uvzcknthvfffqjzakuxgdrnthu.workers.dev",nocase; classtype:attempted-recon; sid:200002318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docusign-share.myportfolio.com",nocase; classtype:attempted-recon; sid:200002319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docusign.mslive.workers.dev",nocase; classtype:attempted-recon; sid:200002320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docusignredtail.web.app",nocase; classtype:attempted-recon; sid:200002321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dolokiousa.co.vu",nocase; classtype:attempted-recon; sid:200002322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dolphin-app-wzr5x.ondigitalocean.app",nocase; classtype:attempted-recon; sid:200002323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dolunaytravel.com",nocase; classtype:attempted-recon; sid:200002324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domaincontroller.pmeimg.co.uk",nocase; classtype:attempted-recon; sid:200002325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg1.web.app",nocase; classtype:attempted-recon; sid:200002327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg10.web.app",nocase; classtype:attempted-recon; sid:200002329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg12.web.app",nocase; classtype:attempted-recon; sid:200002331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg15.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg15.web.app",nocase; classtype:attempted-recon; sid:200002333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg16.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg16.web.app",nocase; classtype:attempted-recon; sid:200002335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg17.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg17.web.app",nocase; classtype:attempted-recon; sid:200002337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg19.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg19.web.app",nocase; classtype:attempted-recon; sid:200002339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg2.web.app",nocase; classtype:attempted-recon; sid:200002341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg20.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg20.web.app",nocase; classtype:attempted-recon; sid:200002343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg21.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg21.web.app",nocase; classtype:attempted-recon; sid:200002345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg22.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg22.web.app",nocase; classtype:attempted-recon; sid:200002347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg23.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg23.web.app",nocase; classtype:attempted-recon; sid:200002349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg24.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg24.web.app",nocase; classtype:attempted-recon; sid:200002351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg25.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg25.web.app",nocase; classtype:attempted-recon; sid:200002353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg27.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg27.web.app",nocase; classtype:attempted-recon; sid:200002355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg28.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg28.web.app",nocase; classtype:attempted-recon; sid:200002357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg29.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg29.web.app",nocase; classtype:attempted-recon; sid:200002359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg3.web.app",nocase; classtype:attempted-recon; sid:200002361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg30.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg30.web.app",nocase; classtype:attempted-recon; sid:200002363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg31.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg31.web.app",nocase; classtype:attempted-recon; sid:200002365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg32.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg32.web.app",nocase; classtype:attempted-recon; sid:200002367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg33.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg33.web.app",nocase; classtype:attempted-recon; sid:200002369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg34.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg34.web.app",nocase; classtype:attempted-recon; sid:200002371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg35.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg35.web.app",nocase; classtype:attempted-recon; sid:200002373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg4.web.app",nocase; classtype:attempted-recon; sid:200002375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg6.web.app",nocase; classtype:attempted-recon; sid:200002377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg7.web.app",nocase; classtype:attempted-recon; sid:200002379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg8.web.app",nocase; classtype:attempted-recon; sid:200002381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domelnews.com",nocase; classtype:attempted-recon; sid:200002382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domesmarketing.com",nocase; classtype:attempted-recon; sid:200002383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dominoisland.my.id",nocase; classtype:attempted-recon; sid:200002384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domotec.com.uy",nocase; classtype:attempted-recon; sid:200002385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dongthachcao.com",nocase; classtype:attempted-recon; sid:200002386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doodles.mints-link.com",nocase; classtype:attempted-recon; sid:200002387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dowaba-s2dhl.blogspot.com",nocase; classtype:attempted-recon; sid:200002388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"download-folder-files.secure-place.workers.dev",nocase; classtype:attempted-recon; sid:200002389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"downloadd.2828-22.duckdns.org",nocase; classtype:attempted-recon; sid:200002390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"downloadfull.duia.us",nocase; classtype:attempted-recon; sid:200002391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"downloadquickbook.ocafghan.com",nocase; classtype:attempted-recon; sid:200002392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"downrightminiaturehashmap.parcooff.repl.co",nocase; classtype:attempted-recon; sid:200002393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dowward.top",nocase; classtype:attempted-recon; sid:200002394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dpcpl.com",nocase; classtype:attempted-recon; sid:200002395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dpd-redelivery-uk.com",nocase; classtype:attempted-recon; sid:200002396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dpd.survalyzer.swiss",nocase; classtype:attempted-recon; sid:200002397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dpfko-inv.web.app",nocase; classtype:attempted-recon; sid:200002398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dpmasdaskj.pages.dev",nocase; classtype:attempted-recon; sid:200002399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dpqatibadq.duckdns.org",nocase; classtype:attempted-recon; sid:200002400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dptointerno9021.webcindario.com",nocase; classtype:attempted-recon; sid:200002401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dq244x.hyperphp.com",nocase; classtype:attempted-recon; sid:200002402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drabadvancedautomatedinformationsystem.onlin6362.repl.co",nocase; classtype:attempted-recon; sid:200002403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drbazzpinx.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200002404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive-file-device-local-disk.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive-file-device-local-disk.web.app",nocase; classtype:attempted-recon; sid:200002406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.dataexpertservices.hu",nocase; classtype:attempted-recon; sid:200002407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"driveequitypartners.com",nocase; classtype:attempted-recon; sid:200002408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"droits.typeform.com",nocase; classtype:attempted-recon; sid:200002409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drpertmac.co.za",nocase; classtype:attempted-recon; sid:200002410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dry-cell-1d4c.mullinsdavi.workers.dev",nocase; classtype:attempted-recon; sid:200002411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dry-dawn-acf5.jgomez2482804.workers.dev",nocase; classtype:attempted-recon; sid:200002412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dry-shape-0bbc.sophia-pipefittinghtxd7833.workers.dev",nocase; classtype:attempted-recon; sid:200002413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dry-union-280f.diianekalll.workers.dev",nocase; classtype:attempted-recon; sid:200002414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dry-violet-309b.project-pdf-assets.workers.dev",nocase; classtype:attempted-recon; sid:200002415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dsacxv.lexingfenqi.cn",nocase; classtype:attempted-recon; sid:200002416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dsbfinancialservice.com",nocase; classtype:attempted-recon; sid:200002417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dsfcx.tpgtdyc.cn",nocase; classtype:attempted-recon; sid:200002418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dsfghf.square.site",nocase; classtype:attempted-recon; sid:200002419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dsgcbeonline.com",nocase; classtype:attempted-recon; sid:200002420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dsgv.73961.cn",nocase; classtype:attempted-recon; sid:200002421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dskuk.org",nocase; classtype:attempted-recon; sid:200002422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dsvsd.ntszyy.cn",nocase; classtype:attempted-recon; sid:200002423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dtavdcjysf.duckdns.org",nocase; classtype:attempted-recon; sid:200002424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"duahatii.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200002425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dualhooked-coinbase-phishing.lucasong5.repl.co",nocase; classtype:attempted-recon; sid:200002426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dull-yummy-attempt.glitch.me",nocase; classtype:attempted-recon; sid:200002427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dumboland.ro",nocase; classtype:attempted-recon; sid:200002428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dunescapital.ae",nocase; classtype:attempted-recon; sid:200002429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"duo-ange.com",nocase; classtype:attempted-recon; sid:200002430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"duratechindia.in",nocase; classtype:attempted-recon; sid:200002431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"duri.squaremoo.com",nocase; classtype:attempted-recon; sid:200002432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dvdf.39951.cn",nocase; classtype:attempted-recon; sid:200002433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dvdfh.75795.cn",nocase; classtype:attempted-recon; sid:200002434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dvdfzn.rhivtpg.cn",nocase; classtype:attempted-recon; sid:200002435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dvds.21563.cn",nocase; classtype:attempted-recon; sid:200002436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dvecrjoexm.duckdns.org",nocase; classtype:attempted-recon; sid:200002437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dvgh.wenkai88.cn",nocase; classtype:attempted-recon; sid:200002438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dwedw973.top",nocase; classtype:attempted-recon; sid:200002439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dwesecure.com",nocase; classtype:attempted-recon; sid:200002440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dwilaksmii.com",nocase; classtype:attempted-recon; sid:200002441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dxdxdxe.web.app",nocase; classtype:attempted-recon; sid:200002442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dxxmmyy.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dxxmmyy.web.app",nocase; classtype:attempted-recon; sid:200002444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dycold.co.kr",nocase; classtype:attempted-recon; sid:200002445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dynastyclinic.ae",nocase; classtype:attempted-recon; sid:200002446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dystrybutorpolska.com",nocase; classtype:attempted-recon; sid:200002447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dytsa2.ga",nocase; classtype:attempted-recon; sid:200002448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dytsa2.gq",nocase; classtype:attempted-recon; sid:200002449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dyuvstyfawecteraw.blogspot.de",nocase; classtype:attempted-recon; sid:200002450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dzgebsdqsw.duckdns.org",nocase; classtype:attempted-recon; sid:200002451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e-1-b7ed59.ingress-florina.ewp.live",nocase; classtype:attempted-recon; sid:200002452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e-cassare.org",nocase; classtype:attempted-recon; sid:200002453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e-sport.bti-if.dk",nocase; classtype:attempted-recon; sid:200002454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e-surat.kominfo.tabalongkab.go.id",nocase; classtype:attempted-recon; sid:200002455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e1aae61c265532e4bd8a014d5391cde4-dot-office-352115.uk.r.appspot.com",nocase; classtype:attempted-recon; sid:200002456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e4ff557e.sso-secure-mail04wtwdw4.pages.dev",nocase; classtype:attempted-recon; sid:200002457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e4ra.byethost8.com",nocase; classtype:attempted-recon; sid:200002458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e63q45f9h5fr.clickfunnels.com",nocase; classtype:attempted-recon; sid:200002459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eagleeyeapparel.com",nocase; classtype:attempted-recon; sid:200002460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eaglestar.com.myelf75irfhajtm3egepywelf75irfhajtm3egepywelf75irfhajtm3egepyw.servicecareireland.com",nocase; classtype:attempted-recon; sid:200002461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eaglesvision.com.br",nocase; classtype:attempted-recon; sid:200002462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ealertsbankofamerica.info",nocase; classtype:attempted-recon; sid:200002463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eawdgidauw.duckdns.org",nocase; classtype:attempted-recon; sid:200002464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eazytasks.com",nocase; classtype:attempted-recon; sid:200002465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebankinetpersonas.ebrouasonet.repl.co",nocase; classtype:attempted-recon; sid:200002466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebanking-ch3-ubs-18919.web.app",nocase; classtype:attempted-recon; sid:200002467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebanking-ch3-ubs-1d5b2.web.app",nocase; classtype:attempted-recon; sid:200002468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebanking-ch3-ubs-45117.web.app",nocase; classtype:attempted-recon; sid:200002469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebanking-ch3-ubs-5179a.web.app",nocase; classtype:attempted-recon; sid:200002470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebanking-ch3-ubs-7e975.web.app",nocase; classtype:attempted-recon; sid:200002471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebanking-ch3-ubs-8248d.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebanking-ch3-ubs.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebanking-ch3-ubs.web.app",nocase; classtype:attempted-recon; sid:200002474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebankingbroucomuy.bancoebrou.repl.co",nocase; classtype:attempted-recon; sid:200002475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebankingbroufrontendllavedigitalcrear.baninbroufronte.repl.co",nocase; classtype:attempted-recon; sid:200002476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebfortis-be.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebfortis-be.web.app",nocase; classtype:attempted-recon; sid:200002478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebr0u.ebakingbrou.repl.co",nocase; classtype:attempted-recon; sid:200002479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebrou.ebroubanking1.repl.co",nocase; classtype:attempted-recon; sid:200002480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebrou.zs2001.repl.co",nocase; classtype:attempted-recon; sid:200002481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebroubankinguyu.bsnking.repl.co",nocase; classtype:attempted-recon; sid:200002482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebrouconnec3log.ricbrou4logc3.repl.co",nocase; classtype:attempted-recon; sid:200002483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebroulogc9sessi0n.brouproductlogc.repl.co",nocase; classtype:attempted-recon; sid:200002484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebrouredirecionador.ebroumiredireci.repl.co",nocase; classtype:attempted-recon; sid:200002485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ebrousistema.fwbrou.repl.co",nocase; classtype:attempted-recon; sid:200002486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ecc.y3i4yhx.cn",nocase; classtype:attempted-recon; sid:200002487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ecckjvrpdb.duckdns.org",nocase; classtype:attempted-recon; sid:200002488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eccooutletpolska.com",nocase; classtype:attempted-recon; sid:200002489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eclass.johnrobertpowers.co.id",nocase; classtype:attempted-recon; sid:200002490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ecngx318.inmotionhosting.com",nocase; classtype:attempted-recon; sid:200002491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"economic-poet-b50.notion.site",nocase; classtype:attempted-recon; sid:200002492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ecs-india.com",nocase; classtype:attempted-recon; sid:200002493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"edconcepts.in",nocase; classtype:attempted-recon; sid:200002494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"edgecryptood.net",nocase; classtype:attempted-recon; sid:200002495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"editingthatworks.com",nocase; classtype:attempted-recon; sid:200002496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"edocuments18032022app-1310252903.cos.na-ashburn.myqcloud.com",nocase; classtype:attempted-recon; sid:200002497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"edqfreizzm.duckdns.org",nocase; classtype:attempted-recon; sid:200002498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"educaresatkhira.com",nocase; classtype:attempted-recon; sid:200002499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"edufarm.com.np",nocase; classtype:attempted-recon; sid:200002500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ee-account-id.web.app",nocase; classtype:attempted-recon; sid:200002501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eemdme966.hyperphp.com",nocase; classtype:attempted-recon; sid:200002502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eertfawedaw.duckdns.org",nocase; classtype:attempted-recon; sid:200002503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"efad-sa.com",nocase; classtype:attempted-recon; sid:200002504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"efax25042022-webapps1-1311433986.cos.ap-chengdu.myqcloud.com",nocase; classtype:attempted-recon; sid:200002505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"effectiveaffectionatemodels.galiciabank1.repl.co",nocase; classtype:attempted-recon; sid:200002506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"effg.yykky.cn",nocase; classtype:attempted-recon; sid:200002507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"effism.com",nocase; classtype:attempted-recon; sid:200002508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"efrem.retroreplays.com",nocase; classtype:attempted-recon; sid:200002509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"egegegrrrrhrrhrh.000webhostapp.com",nocase; classtype:attempted-recon; sid:200002510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"egfhrnyrow.duckdns.org",nocase; classtype:attempted-recon; sid:200002511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"egniol.co.in",nocase; classtype:attempted-recon; sid:200002512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"egqidftzqz.duckdns.org",nocase; classtype:attempted-recon; sid:200002513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"egyjk.ichuntian.cn",nocase; classtype:attempted-recon; sid:200002514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ehkwiwzrpb.duckdns.org",nocase; classtype:attempted-recon; sid:200002515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ehmimumofb.duckdns.org",nocase; classtype:attempted-recon; sid:200002516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ehownkzjzt.duckdns.org",nocase; classtype:attempted-recon; sid:200002517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eilafgroup.com",nocase; classtype:attempted-recon; sid:200002518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ejhaldsnwv.duckdns.org",nocase; classtype:attempted-recon; sid:200002519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ek1-eknnetmn.live",nocase; classtype:attempted-recon; sid:200002520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ek1-eknnetmnn.club",nocase; classtype:attempted-recon; sid:200002521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ek1-eknnetnm.xyz",nocase; classtype:attempted-recon; sid:200002522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ek9p.com",nocase; classtype:attempted-recon; sid:200002523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eki-net.1miiei.co",nocase; classtype:attempted-recon; sid:200002524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eki-net.ys7frkdbr.com",nocase; classtype:attempted-recon; sid:200002525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eki.mzayh.shop",nocase; classtype:attempted-recon; sid:200002526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ekipgwrgok.duckdns.org",nocase; classtype:attempted-recon; sid:200002527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"electrocoolhvacr.com",nocase; classtype:attempted-recon; sid:200002528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elektroonline.pl",nocase; classtype:attempted-recon; sid:200002529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elfatnianass.github.io",nocase; classtype:attempted-recon; sid:200002530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elissaalvey.com",nocase; classtype:attempted-recon; sid:200002531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elite-housekeeping.com",nocase; classtype:attempted-recon; sid:200002532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elitedentalofsi.com",nocase; classtype:attempted-recon; sid:200002533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eliteskullsmilsimcwb.com.br",nocase; classtype:attempted-recon; sid:200002534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ellatinodigital.com",nocase; classtype:attempted-recon; sid:200002535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elmec4you.it",nocase; classtype:attempted-recon; sid:200002536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elnicaptcha12.ml",nocase; classtype:attempted-recon; sid:200002537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elomo.ro",nocase; classtype:attempted-recon; sid:200002538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elrattwbmldevce.weebly.com",nocase; classtype:attempted-recon; sid:200002539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elsewedy-td.com",nocase; classtype:attempted-recon; sid:200002540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eltiempodeirpormas.com",nocase; classtype:attempted-recon; sid:200002541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elzgkcycym.duckdns.org",nocase; classtype:attempted-recon; sid:200002542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"email-login-page-109702.weeblysite.com",nocase; classtype:attempted-recon; sid:200002543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"email302.com",nocase; classtype:attempted-recon; sid:200002544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailbtcom.weeblysite.com",nocase; classtype:attempted-recon; sid:200002545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailonedriveab5c802a62d5173498c6fff3674005c8ab5c802a62d5173498.newonemail2.workers.dev",nocase; classtype:attempted-recon; sid:200002546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailservices-webprovide-41a6.wemovetesting.workers.dev",nocase; classtype:attempted-recon; sid:200002547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailsettings.webflow.io",nocase; classtype:attempted-recon; sid:200002548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailverificationupdate39.godaddysites.com",nocase; classtype:attempted-recon; sid:200002549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailverificationupdate82.godaddysites.com",nocase; classtype:attempted-recon; sid:200002550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailverificationupdate9.godaddysites.com",nocase; classtype:attempted-recon; sid:200002551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailview.top",nocase; classtype:attempted-recon; sid:200002552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailwebaccess.co.uk",nocase; classtype:attempted-recon; sid:200002553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emetgalicia958594009485.galicia0922.repl.co",nocase; classtype:attempted-recon; sid:200002554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emirateslogistlcs.com",nocase; classtype:attempted-recon; sid:200002555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emissionecarta.com",nocase; classtype:attempted-recon; sid:200002556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emissionepay.com",nocase; classtype:attempted-recon; sid:200002557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emlink.me",nocase; classtype:attempted-recon; sid:200002558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emmemd99985.hyperphp.com",nocase; classtype:attempted-recon; sid:200002559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"employees.momentumgrps.workers.dev",nocase; classtype:attempted-recon; sid:200002560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emprego.projetosparente.com.br",nocase; classtype:attempted-recon; sid:200002561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"empty-rice-4c1a.brian2495.workers.dev",nocase; classtype:attempted-recon; sid:200002562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"empty-river-1774.on.fleek.co",nocase; classtype:attempted-recon; sid:200002563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"empty-river-9729.qm4e2oon.workers.dev",nocase; classtype:attempted-recon; sid:200002564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"empty-sky-0112.on.fleek.co",nocase; classtype:attempted-recon; sid:200002565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"en.kprfn.workers.dev",nocase; classtype:attempted-recon; sid:200002566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"en.vivuni.workers.dev",nocase; classtype:attempted-recon; sid:200002567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enbolivia.com",nocase; classtype:attempted-recon; sid:200002568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"encryptaiu.com",nocase; classtype:attempted-recon; sid:200002569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"encryptbtck.com",nocase; classtype:attempted-recon; sid:200002570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"encryptdrive.booogle.net",nocase; classtype:attempted-recon; sid:200002571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"encrypthkpd.com",nocase; classtype:attempted-recon; sid:200002572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"encryptodapps.pages.dev",nocase; classtype:attempted-recon; sid:200002573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"encurtador.dev",nocase; classtype:attempted-recon; sid:200002574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enddytldwb.duckdns.org",nocase; classtype:attempted-recon; sid:200002575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"energoservice.ge",nocase; classtype:attempted-recon; sid:200002576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"energyshop-bitflyer.blogspot.com",nocase; classtype:attempted-recon; sid:200002577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enfin-a457d.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enfin-a457d.web.app",nocase; classtype:attempted-recon; sid:200002579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eng-transportation-document.myportfolio.com",nocase; classtype:attempted-recon; sid:200002580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"engcamp.org",nocase; classtype:attempted-recon; sid:200002581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"engidagraphics.com",nocase; classtype:attempted-recon; sid:200002582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"engineerspak.com",nocase; classtype:attempted-recon; sid:200002583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"engvhzoiis.duckdns.org",nocase; classtype:attempted-recon; sid:200002584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enjgjmvgmp.duckdns.org",nocase; classtype:attempted-recon; sid:200002585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enjoyapartments.com",nocase; classtype:attempted-recon; sid:200002586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enmodofeliz.com",nocase; classtype:attempted-recon; sid:200002587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enoisdf.hyperphp.com",nocase; classtype:attempted-recon; sid:200002588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"entbqnk.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"entbqnk.web.app",nocase; classtype:attempted-recon; sid:200002590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enterlogincredicar.com",nocase; classtype:attempted-recon; sid:200002591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"entidadadbancaria.entidadbanciari.repl.co",nocase; classtype:attempted-recon; sid:200002592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eoptnagwyo.duckdns.org",nocase; classtype:attempted-recon; sid:200002593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ep-2hv.pages.dev",nocase; classtype:attempted-recon; sid:200002594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"epochfinancialus.com",nocase; classtype:attempted-recon; sid:200002595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"epos-card.gpiceg.shop",nocase; classtype:attempted-recon; sid:200002596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"epos-card.gywgzz.shop",nocase; classtype:attempted-recon; sid:200002597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"epos-card.jcjddwl.cn",nocase; classtype:attempted-recon; sid:200002598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eptxxdbftc.duckdns.org",nocase; classtype:attempted-recon; sid:200002599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"equatorialbeautifulbases.bancorbrou.repl.co",nocase; classtype:attempted-recon; sid:200002600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"equipmentrefuge.club",nocase; classtype:attempted-recon; sid:200002601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"era.li",nocase; classtype:attempted-recon; sid:200002602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"erasff.hyperphp.com",nocase; classtype:attempted-recon; sid:200002603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"erc20-coin.xyz",nocase; classtype:attempted-recon; sid:200002604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eresnuestroganador.liveblog365.com",nocase; classtype:attempted-recon; sid:200002605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eresnuestroganadorr.liveblog365.com",nocase; classtype:attempted-recon; sid:200002606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"erfhjkufvhuhhfvfdsxcfvhbj.weebly.com",nocase; classtype:attempted-recon; sid:200002607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ergambrummetre23.hostfree.pw",nocase; classtype:attempted-recon; sid:200002608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eritreanarchives.org",nocase; classtype:attempted-recon; sid:200002609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"erl.com.de",nocase; classtype:attempted-recon; sid:200002610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"error.de.in.ingreso.nalumosovocationalinstitute.com",nocase; classtype:attempted-recon; sid:200002611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"error.theseo.pk",nocase; classtype:attempted-recon; sid:200002612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ershamshad.github.io",nocase; classtype:attempted-recon; sid:200002613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"erx77.duckdns.org",nocase; classtype:attempted-recon; sid:200002614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"es-pace-fact01-b8384f.ingress-earth.ewp.live",nocase; classtype:attempted-recon; sid:200002615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esenat.unimap.edu.my",nocase; classtype:attempted-recon; sid:200002616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esfdesentakip.com",nocase; classtype:attempted-recon; sid:200002617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eshcolhouse.com",nocase; classtype:attempted-recon; sid:200002618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esig.co.kr",nocase; classtype:attempted-recon; sid:200002619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"espace-client-facture.com",nocase; classtype:attempted-recon; sid:200002620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"espacepart-messagerie.duckdns.org",nocase; classtype:attempted-recon; sid:200002621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esperanzabravo.com",nocase; classtype:attempted-recon; sid:200002622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esportbattle.ru",nocase; classtype:attempted-recon; sid:200002623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esrdfesarw.duckdns.org",nocase; classtype:attempted-recon; sid:200002624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esszoqb.cn",nocase; classtype:attempted-recon; sid:200002625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etapoena30.pages.dev",nocase; classtype:attempted-recon; sid:200002626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etatrecharge.com",nocase; classtype:attempted-recon; sid:200002627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etc-mieisais.bsiwvul.cn",nocase; classtype:attempted-recon; sid:200002628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etc-mieisais.ptxhge.cn",nocase; classtype:attempted-recon; sid:200002629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etc-mieisais.szjcwbs.cn",nocase; classtype:attempted-recon; sid:200002630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eth-pos.cc",nocase; classtype:attempted-recon; sid:200002631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eth-wintermute.net",nocase; classtype:attempted-recon; sid:200002632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethbw.net",nocase; classtype:attempted-recon; sid:200002633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethdw.top",nocase; classtype:attempted-recon; sid:200002634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethereum-16miningarea.com",nocase; classtype:attempted-recon; sid:200002635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethereum-18miningarea.com",nocase; classtype:attempted-recon; sid:200002636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethereum-v2.net",nocase; classtype:attempted-recon; sid:200002637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethereum2pool.live",nocase; classtype:attempted-recon; sid:200002638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethersairdrops.io",nocase; classtype:attempted-recon; sid:200002639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethhardfork.com",nocase; classtype:attempted-recon; sid:200002640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethhex.com",nocase; classtype:attempted-recon; sid:200002641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethjq.xyz",nocase; classtype:attempted-recon; sid:200002642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethjs.xyz",nocase; classtype:attempted-recon; sid:200002643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethju.xyz",nocase; classtype:attempted-recon; sid:200002644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethnictrendz.com",nocase; classtype:attempted-recon; sid:200002645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethqz.top",nocase; classtype:attempted-recon; sid:200002646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etiqvpbcgz.duckdns.org",nocase; classtype:attempted-recon; sid:200002647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ettoyasqd.hyperphp.com",nocase; classtype:attempted-recon; sid:200002648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eugnerally-wixsite-com.filesusr.com",nocase; classtype:attempted-recon; sid:200002649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eulxugspof.duckdns.org",nocase; classtype:attempted-recon; sid:200002650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eurexdjq.com",nocase; classtype:attempted-recon; sid:200002651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eurobengal.com",nocase; classtype:attempted-recon; sid:200002652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"europeandiabetology.org",nocase; classtype:attempted-recon; sid:200002653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"euytzypwnn.duckdns.org",nocase; classtype:attempted-recon; sid:200002654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evacare.com.tr",nocase; classtype:attempted-recon; sid:200002655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eventchip2b.com",nocase; classtype:attempted-recon; sid:200002656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eventpromo2022.com",nocase; classtype:attempted-recon; sid:200002657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eventpromo2022.duckdns.org",nocase; classtype:attempted-recon; sid:200002658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eventpubgm.barux2022.tk",nocase; classtype:attempted-recon; sid:200002659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"everestmotors.com.np",nocase; classtype:attempted-recon; sid:200002660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evnmhailuy.duckdns.org",nocase; classtype:attempted-recon; sid:200002661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evolbithman.web.app",nocase; classtype:attempted-recon; sid:200002662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evolutionsny.com",nocase; classtype:attempted-recon; sid:200002663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evri-uk-package.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evri-uk-package.web.app",nocase; classtype:attempted-recon; sid:200002665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ewgczubbwf.duckdns.org",nocase; classtype:attempted-recon; sid:200002666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ewhcuykllj.duckdns.org",nocase; classtype:attempted-recon; sid:200002667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ewhlvmksod.duckdns.org",nocase; classtype:attempted-recon; sid:200002668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ewigygxrtr.duckdns.org",nocase; classtype:attempted-recon; sid:200002669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ewplay.se",nocase; classtype:attempted-recon; sid:200002670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exatajuridicohs.com",nocase; classtype:attempted-recon; sid:200002671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exc.bmtf.com.bd",nocase; classtype:attempted-recon; sid:200002672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"excelmanagementmali.com",nocase; classtype:attempted-recon; sid:200002673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exchange4free.com",nocase; classtype:attempted-recon; sid:200002674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exito-validation.260mb.net",nocase; classtype:attempted-recon; sid:200002675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exitoapptuya.liveblog365.com",nocase; classtype:attempted-recon; sid:200002676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exitoasesoresalcliente.liveblog365.com",nocase; classtype:attempted-recon; sid:200002677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exitopaytuya.hostfree.pw",nocase; classtype:attempted-recon; sid:200002678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exitotuyapayfmw.hostfree.pw",nocase; classtype:attempted-recon; sid:200002679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exitoytuya.com",nocase; classtype:attempted-recon; sid:200002680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exitsecutt.260mb.net",nocase; classtype:attempted-recon; sid:200002681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exittopagosapp.hostfree.pw",nocase; classtype:attempted-recon; sid:200002682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exmos.shop",nocase; classtype:attempted-recon; sid:200002683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exodu-wllet.newzenler.com",nocase; classtype:attempted-recon; sid:200002684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exodus-wallet.yolasite.com",nocase; classtype:attempted-recon; sid:200002685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exodus.com.download-wallet.arcticasfalt.com",nocase; classtype:attempted-recon; sid:200002686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exoduswalleas.newzenler.com",nocase; classtype:attempted-recon; sid:200002687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exoduswallet.educatorpages.com",nocase; classtype:attempted-recon; sid:200002688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exodusweb-pro.com",nocase; classtype:attempted-recon; sid:200002689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"expediapartnercentral.solemarnoronha.com.br",nocase; classtype:attempted-recon; sid:200002690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"expoalia.com",nocase; classtype:attempted-recon; sid:200002691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"expoglobal.uk",nocase; classtype:attempted-recon; sid:200002692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exten-sion.com",nocase; classtype:attempted-recon; sid:200002693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"extracash.inter.pe.softjonub.ir",nocase; classtype:attempted-recon; sid:200002694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"extracashinterbankperu.com",nocase; classtype:attempted-recon; sid:200002695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"extracloud.com.au",nocase; classtype:attempted-recon; sid:200002696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eyebeyasvda.liveblog365.com",nocase; classtype:attempted-recon; sid:200002697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eypgqpyvvn.duckdns.org",nocase; classtype:attempted-recon; sid:200002698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eyptsyfefh.duckdns.org",nocase; classtype:attempted-recon; sid:200002699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ezblox.site",nocase; classtype:attempted-recon; sid:200002700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ezl.app",nocase; classtype:attempted-recon; sid:200002701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ezonesecurity.com",nocase; classtype:attempted-recon; sid:200002702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ezssausage.com",nocase; classtype:attempted-recon; sid:200002703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"f.account2.almusand.com",nocase; classtype:attempted-recon; sid:200002704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"f00228cb.sibforms.com",nocase; classtype:attempted-recon; sid:200002705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"f2ax5-jqaaa-aaaad-qcutq-cai.ic0.app",nocase; classtype:attempted-recon; sid:200002706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"f8902.ascriancasloucas.pt",nocase; classtype:attempted-recon; sid:200002707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"f8put2prbcr1hfd.webcindario.com",nocase; classtype:attempted-recon; sid:200002708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"f9w1lned0ruqblxi6jahwotak.filesusr.com",nocase; classtype:attempted-recon; sid:200002709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fabulouseducatedplanes.galitraargwws.repl.co",nocase; classtype:attempted-recon; sid:200002710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-accts.pages-recovery.workers.dev",nocase; classtype:attempted-recon; sid:200002711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-io.com",nocase; classtype:attempted-recon; sid:200002712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-io.solcenter.cl",nocase; classtype:attempted-recon; sid:200002713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform1.tk",nocase; classtype:attempted-recon; sid:200002714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform10.tk",nocase; classtype:attempted-recon; sid:200002715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform100.tk",nocase; classtype:attempted-recon; sid:200002716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform11.tk",nocase; classtype:attempted-recon; sid:200002717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform12.tk",nocase; classtype:attempted-recon; sid:200002718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform13.tk",nocase; classtype:attempted-recon; sid:200002719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform14.tk",nocase; classtype:attempted-recon; sid:200002720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform15.tk",nocase; classtype:attempted-recon; sid:200002721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform16.tk",nocase; classtype:attempted-recon; sid:200002722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform17.tk",nocase; classtype:attempted-recon; sid:200002723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform18.tk",nocase; classtype:attempted-recon; sid:200002724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform19.tk",nocase; classtype:attempted-recon; sid:200002725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform2.tk",nocase; classtype:attempted-recon; sid:200002726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform20.tk",nocase; classtype:attempted-recon; sid:200002727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform21.tk",nocase; classtype:attempted-recon; sid:200002728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform22.tk",nocase; classtype:attempted-recon; sid:200002729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform23.tk",nocase; classtype:attempted-recon; sid:200002730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform24.tk",nocase; classtype:attempted-recon; sid:200002731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform25.tk",nocase; classtype:attempted-recon; sid:200002732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform26.tk",nocase; classtype:attempted-recon; sid:200002733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform27.tk",nocase; classtype:attempted-recon; sid:200002734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform28.tk",nocase; classtype:attempted-recon; sid:200002735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform29.tk",nocase; classtype:attempted-recon; sid:200002736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform3.tk",nocase; classtype:attempted-recon; sid:200002737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform30.tk",nocase; classtype:attempted-recon; sid:200002738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform31.tk",nocase; classtype:attempted-recon; sid:200002739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform32.tk",nocase; classtype:attempted-recon; sid:200002740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform33.tk",nocase; classtype:attempted-recon; sid:200002741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform34.tk",nocase; classtype:attempted-recon; sid:200002742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform35.tk",nocase; classtype:attempted-recon; sid:200002743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform36.tk",nocase; classtype:attempted-recon; sid:200002744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform37.tk",nocase; classtype:attempted-recon; sid:200002745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform38.tk",nocase; classtype:attempted-recon; sid:200002746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform39.tk",nocase; classtype:attempted-recon; sid:200002747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform4.tk",nocase; classtype:attempted-recon; sid:200002748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform40.tk",nocase; classtype:attempted-recon; sid:200002749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform41.tk",nocase; classtype:attempted-recon; sid:200002750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform42.tk",nocase; classtype:attempted-recon; sid:200002751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform43.tk",nocase; classtype:attempted-recon; sid:200002752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform44.tk",nocase; classtype:attempted-recon; sid:200002753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform45.tk",nocase; classtype:attempted-recon; sid:200002754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform46.tk",nocase; classtype:attempted-recon; sid:200002755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform47.tk",nocase; classtype:attempted-recon; sid:200002756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform48.tk",nocase; classtype:attempted-recon; sid:200002757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform49.tk",nocase; classtype:attempted-recon; sid:200002758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform5.tk",nocase; classtype:attempted-recon; sid:200002759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform50.tk",nocase; classtype:attempted-recon; sid:200002760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform51.tk",nocase; classtype:attempted-recon; sid:200002761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform52.tk",nocase; classtype:attempted-recon; sid:200002762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform53.tk",nocase; classtype:attempted-recon; sid:200002763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform54.tk",nocase; classtype:attempted-recon; sid:200002764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform55.tk",nocase; classtype:attempted-recon; sid:200002765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform56.tk",nocase; classtype:attempted-recon; sid:200002766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform57.tk",nocase; classtype:attempted-recon; sid:200002767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform58.tk",nocase; classtype:attempted-recon; sid:200002768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform59.tk",nocase; classtype:attempted-recon; sid:200002769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform6.tk",nocase; classtype:attempted-recon; sid:200002770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform60.tk",nocase; classtype:attempted-recon; sid:200002771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform61.tk",nocase; classtype:attempted-recon; sid:200002772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform62.tk",nocase; classtype:attempted-recon; sid:200002773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform63.tk",nocase; classtype:attempted-recon; sid:200002774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform64.tk",nocase; classtype:attempted-recon; sid:200002775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform65.tk",nocase; classtype:attempted-recon; sid:200002776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform66.tk",nocase; classtype:attempted-recon; sid:200002777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform67.tk",nocase; classtype:attempted-recon; sid:200002778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform68.tk",nocase; classtype:attempted-recon; sid:200002779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform69.tk",nocase; classtype:attempted-recon; sid:200002780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform7.tk",nocase; classtype:attempted-recon; sid:200002781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform70.tk",nocase; classtype:attempted-recon; sid:200002782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform71.tk",nocase; classtype:attempted-recon; sid:200002783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform72.tk",nocase; classtype:attempted-recon; sid:200002784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform73.tk",nocase; classtype:attempted-recon; sid:200002785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform74.tk",nocase; classtype:attempted-recon; sid:200002786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform75.tk",nocase; classtype:attempted-recon; sid:200002787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform76.tk",nocase; classtype:attempted-recon; sid:200002788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform77.tk",nocase; classtype:attempted-recon; sid:200002789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform78.tk",nocase; classtype:attempted-recon; sid:200002790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform79.tk",nocase; classtype:attempted-recon; sid:200002791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform8.tk",nocase; classtype:attempted-recon; sid:200002792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform80.tk",nocase; classtype:attempted-recon; sid:200002793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform81.tk",nocase; classtype:attempted-recon; sid:200002794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform82.tk",nocase; classtype:attempted-recon; sid:200002795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform83.tk",nocase; classtype:attempted-recon; sid:200002796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform84.tk",nocase; classtype:attempted-recon; sid:200002797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform85.tk",nocase; classtype:attempted-recon; sid:200002798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform86.tk",nocase; classtype:attempted-recon; sid:200002799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform87.tk",nocase; classtype:attempted-recon; sid:200002800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform88.tk",nocase; classtype:attempted-recon; sid:200002801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform89.tk",nocase; classtype:attempted-recon; sid:200002802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform9.tk",nocase; classtype:attempted-recon; sid:200002803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform90.tk",nocase; classtype:attempted-recon; sid:200002804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform91.tk",nocase; classtype:attempted-recon; sid:200002805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform92.tk",nocase; classtype:attempted-recon; sid:200002806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform93.tk",nocase; classtype:attempted-recon; sid:200002807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform94.tk",nocase; classtype:attempted-recon; sid:200002808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform95.tk",nocase; classtype:attempted-recon; sid:200002809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform96.tk",nocase; classtype:attempted-recon; sid:200002810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform97.tk",nocase; classtype:attempted-recon; sid:200002811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform98.tk",nocase; classtype:attempted-recon; sid:200002812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-metaplasform99.tk",nocase; classtype:attempted-recon; sid:200002813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform466.tk",nocase; classtype:attempted-recon; sid:200002814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform540.tk",nocase; classtype:attempted-recon; sid:200002815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform574.tk",nocase; classtype:attempted-recon; sid:200002816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform575.tk",nocase; classtype:attempted-recon; sid:200002817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform647.tk",nocase; classtype:attempted-recon; sid:200002818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook.asiafinance.in",nocase; classtype:attempted-recon; sid:200002819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebooksecurity-verifikasiulang.weebly.com",nocase; classtype:attempted-recon; sid:200002820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebookvieclamtainhaa.weebly.com",nocase; classtype:attempted-recon; sid:200002821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facenboollogin.blogspot.com",nocase; classtype:attempted-recon; sid:200002822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facilagost0me.com",nocase; classtype:attempted-recon; sid:200002823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facobook.host20.uk",nocase; classtype:attempted-recon; sid:200002824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"factctmago4.xyz",nocase; classtype:attempted-recon; sid:200002825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"factctmago5.xyz",nocase; classtype:attempted-recon; sid:200002826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fadsfsafasfsaf.herokuapp.com",nocase; classtype:attempted-recon; sid:200002827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"faiifsyejs.duckdns.org",nocase; classtype:attempted-recon; sid:200002828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"faikqhpmwo.duckdns.org",nocase; classtype:attempted-recon; sid:200002829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fairfieldbooks.com.au",nocase; classtype:attempted-recon; sid:200002830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"faizankhan0408.github.io",nocase; classtype:attempted-recon; sid:200002831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"faldflifb544fsfhgbzhb15gshb.web.id",nocase; classtype:attempted-recon; sid:200002832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"faleballe.com",nocase; classtype:attempted-recon; sid:200002833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"falling-brook-b2a0.althaf30.workers.dev",nocase; classtype:attempted-recon; sid:200002834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"falling-disk.1zofvddx.workers.dev",nocase; classtype:attempted-recon; sid:200002835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"falling-heart-4057.on.fleek.co",nocase; classtype:attempted-recon; sid:200002836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"falling-resonance-9f91.westernroad.workers.dev",nocase; classtype:attempted-recon; sid:200002837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fancy-pine-7418.ach7481982.workers.dev",nocase; classtype:attempted-recon; sid:200002838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fancy-rain-22bf.vakagew948.workers.dev",nocase; classtype:attempted-recon; sid:200002839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fancy-sky-8346.on.fleek.co",nocase; classtype:attempted-recon; sid:200002840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fancy.bibirgadangdicipok.workers.dev",nocase; classtype:attempted-recon; sid:200002841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fancybuddy.in",nocase; classtype:attempted-recon; sid:200002842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fancyexpeditions.com",nocase; classtype:attempted-recon; sid:200002843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fantasyfootballdata.com",nocase; classtype:attempted-recon; sid:200002844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"farconavenue.com",nocase; classtype:attempted-recon; sid:200002845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"farsnameh.com",nocase; classtype:attempted-recon; sid:200002846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fasman.xyz",nocase; classtype:attempted-recon; sid:200002847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fast.for-orders.com",nocase; classtype:attempted-recon; sid:200002848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fast453253.sapm183.repl.co",nocase; classtype:attempted-recon; sid:200002849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"faster09-b94c1e.ingress-comporellon.ewp.live",nocase; classtype:attempted-recon; sid:200002850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fasxc.q4crr44.cn",nocase; classtype:attempted-recon; sid:200002851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fatur4agost01.com",nocase; classtype:attempted-recon; sid:200002852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fatur4agosto0.com",nocase; classtype:attempted-recon; sid:200002853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fatura.life",nocase; classtype:attempted-recon; sid:200002854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fauci.xyz",nocase; classtype:attempted-recon; sid:200002855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fawltxfkac.duckdns.org",nocase; classtype:attempted-recon; sid:200002856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fax-doc25042022webfax-1311433986.cos.ap-nanjing.myqcloud.com",nocase; classtype:attempted-recon; sid:200002857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fax07032022doc1-1310019602.cos.na-siliconvalley.myqcloud.com",nocase; classtype:attempted-recon; sid:200002858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fax07042022fax498apps58-1310726006.cos.ap-seoul.myqcloud.com",nocase; classtype:attempted-recon; sid:200002859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fb-case-id-28031803-fcdc-48af.web.app",nocase; classtype:attempted-recon; sid:200002860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fb-pages.proteksion-help.workers.dev",nocase; classtype:attempted-recon; sid:200002861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fb-pemblokiiran.weebly.com",nocase; classtype:attempted-recon; sid:200002862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fb.community.guidelines1000315.com",nocase; classtype:attempted-recon; sid:200002863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fb7927.bget.ru",nocase; classtype:attempted-recon; sid:200002864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fbcom-12951724-review.web.app",nocase; classtype:attempted-recon; sid:200002865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fbcu.bqgquaq.cn",nocase; classtype:attempted-recon; sid:200002866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fbdd.mcsrmyy.cn",nocase; classtype:attempted-recon; sid:200002867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fbdf.62659.cn",nocase; classtype:attempted-recon; sid:200002868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fbdf.jdzszyy.cn",nocase; classtype:attempted-recon; sid:200002869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fbdn.65618.cn",nocase; classtype:attempted-recon; sid:200002870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fbfd.83622.cn",nocase; classtype:attempted-recon; sid:200002871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fbfg.jsxzyy.cn",nocase; classtype:attempted-recon; sid:200002872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fbfn.manglao.cn",nocase; classtype:attempted-recon; sid:200002873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fbfn.nhszyy.cn",nocase; classtype:attempted-recon; sid:200002874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fbftng.76915.cn",nocase; classtype:attempted-recon; sid:200002875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fbtzkcycbp.duckdns.org",nocase; classtype:attempted-recon; sid:200002876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fbvn.83272.cn",nocase; classtype:attempted-recon; sid:200002877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fcbmpagecheck.info",nocase; classtype:attempted-recon; sid:200002878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fccfc.org",nocase; classtype:attempted-recon; sid:200002879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fcdho3wi8uf4-h3erw-uighfv-8erhgb-f0her-ghg.obs.la-south-2.myhuaweicloud.com",nocase; classtype:attempted-recon; sid:200002880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdascx.g7z8ug4.cn",nocase; classtype:attempted-recon; sid:200002881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdbdfr.75363.cn",nocase; classtype:attempted-recon; sid:200002882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdbf.98565.cn",nocase; classtype:attempted-recon; sid:200002883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdbfd.39983.cn",nocase; classtype:attempted-recon; sid:200002884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdbff.ilechun.cn",nocase; classtype:attempted-recon; sid:200002885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdddgj.com",nocase; classtype:attempted-recon; sid:200002886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdfh.haywsnq.cn",nocase; classtype:attempted-recon; sid:200002887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdgbd.kilizdf.cn",nocase; classtype:attempted-recon; sid:200002888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdh.39971.cn",nocase; classtype:attempted-recon; sid:200002889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdhf.lpszyy.cn",nocase; classtype:attempted-recon; sid:200002890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdhfc.dyuwskn.cn",nocase; classtype:attempted-recon; sid:200002891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdn.38961.cn",nocase; classtype:attempted-recon; sid:200002892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdomddtnql.duckdns.org",nocase; classtype:attempted-recon; sid:200002893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdsacvx.emcbcc.cn",nocase; classtype:attempted-recon; sid:200002894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdsbgc.wyrymf.cn",nocase; classtype:attempted-recon; sid:200002895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdsbv.yrkqcem.cn",nocase; classtype:attempted-recon; sid:200002896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscg.t6o4v2q.cn",nocase; classtype:attempted-recon; sid:200002897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscs.aldtqy.cn",nocase; classtype:attempted-recon; sid:200002898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscvx.sekyqxl.cn",nocase; classtype:attempted-recon; sid:200002899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscx.020yyl.cn",nocase; classtype:attempted-recon; sid:200002900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscx.2u53r0.cn",nocase; classtype:attempted-recon; sid:200002901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscx.dazongjinfu.cn",nocase; classtype:attempted-recon; sid:200002902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscx.ijuj.cn",nocase; classtype:attempted-recon; sid:200002903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscx.ofyjxam.cn",nocase; classtype:attempted-recon; sid:200002904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscx.ooegbms.cn",nocase; classtype:attempted-recon; sid:200002905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscx.pjyhny.cn",nocase; classtype:attempted-recon; sid:200002906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscx.pthysnl.cn",nocase; classtype:attempted-recon; sid:200002907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscx.shengzhigou.cn",nocase; classtype:attempted-recon; sid:200002908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscx.snrnrmu.cn",nocase; classtype:attempted-recon; sid:200002909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscx.tirehn.cn",nocase; classtype:attempted-recon; sid:200002910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscx.tvifxn.cn",nocase; classtype:attempted-recon; sid:200002911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscx.zb4i4i.cn",nocase; classtype:attempted-recon; sid:200002912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscx.zfgqvtx.cn",nocase; classtype:attempted-recon; sid:200002913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscx.zjwh05.cn",nocase; classtype:attempted-recon; sid:200002914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdsfd.ynbdofx.cn",nocase; classtype:attempted-recon; sid:200002915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdsxc.hebeidichen.cn",nocase; classtype:attempted-recon; sid:200002916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdsxc.qhdsyle.cn",nocase; classtype:attempted-recon; sid:200002917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdsxc.xuezishop.cn",nocase; classtype:attempted-recon; sid:200002918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdsxcb.ztlmemd.cn",nocase; classtype:attempted-recon; sid:200002919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdsxz.cnvuihdr.cn",nocase; classtype:attempted-recon; sid:200002920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdvcv.ncxjtm.cn",nocase; classtype:attempted-recon; sid:200002921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdx17.hyperphp.com",nocase; classtype:attempted-recon; sid:200002922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdxbd.67383.cn",nocase; classtype:attempted-recon; sid:200002923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdxcj.toojiandan.cn",nocase; classtype:attempted-recon; sid:200002924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"feastcomment.info",nocase; classtype:attempted-recon; sid:200002925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"federales.validacionoficial.com",nocase; classtype:attempted-recon; sid:200002926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fedsc.dsyinleai.cn",nocase; classtype:attempted-recon; sid:200002927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fedxpackage.com",nocase; classtype:attempted-recon; sid:200002928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"feelbons.com",nocase; classtype:attempted-recon; sid:200002929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"feg46h5h.xyz",nocase; classtype:attempted-recon; sid:200002930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"felicids.hostfree.pw",nocase; classtype:attempted-recon; sid:200002931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"femmaterparaguay.x10.mx",nocase; classtype:attempted-recon; sid:200002932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"feowqpeowqab240.ml",nocase; classtype:attempted-recon; sid:200002933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fewery.top",nocase; classtype:attempted-recon; sid:200002934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"feyzankumascilik.com",nocase; classtype:attempted-recon; sid:200002935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ff.38725.cn",nocase; classtype:attempted-recon; sid:200002936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ffessd.s3.us-west-004.backblazeb2.com",nocase; classtype:attempted-recon; sid:200002937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fffn.38959.cn",nocase; classtype:attempted-recon; sid:200002938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ffggg.32axj6u.cn",nocase; classtype:attempted-recon; sid:200002939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ffggh.beaudiani-shop.cn",nocase; classtype:attempted-recon; sid:200002940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ffghh.b5jeeki.cn",nocase; classtype:attempted-recon; sid:200002941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ffghh.hrnlvm.cn",nocase; classtype:attempted-recon; sid:200002942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ffghh.onqkpmc.cn",nocase; classtype:attempted-recon; sid:200002943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ffghj.haituodianzi.cn",nocase; classtype:attempted-recon; sid:200002944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ffhh.hgxrmyy.cn",nocase; classtype:attempted-recon; sid:200002945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ffjftj.cxxrmyy.cn",nocase; classtype:attempted-recon; sid:200002946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ffkyfgmsfb.duckdns.org",nocase; classtype:attempted-recon; sid:200002947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ffnn.mlszyy.cn",nocase; classtype:attempted-recon; sid:200002948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ffny.liancheng2018.cn",nocase; classtype:attempted-recon; sid:200002949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ffurnitureindahjaya.fun",nocase; classtype:attempted-recon; sid:200002950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgbch.38252.cn",nocase; classtype:attempted-recon; sid:200002951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgdcvn.vq0e0ua.cn",nocase; classtype:attempted-recon; sid:200002952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgdfh.fcszyy.cn",nocase; classtype:attempted-recon; sid:200002953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgdh.nsrmyy.cn",nocase; classtype:attempted-recon; sid:200002954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgdscv.zdwpop.cn",nocase; classtype:attempted-recon; sid:200002955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgdsfc.omtmei.cn",nocase; classtype:attempted-recon; sid:200002956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgdsv.nimniow.cn",nocase; classtype:attempted-recon; sid:200002957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgdsxc.miles087.cn",nocase; classtype:attempted-recon; sid:200002958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgdt.andinorealestate.com",nocase; classtype:attempted-recon; sid:200002959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgenm-6qaaa-aaaad-qcurq-cai.ic.fleek.co",nocase; classtype:attempted-recon; sid:200002960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fggh.ffwewck.cn",nocase; classtype:attempted-recon; sid:200002961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgghh.pbgoyg1.cn",nocase; classtype:attempted-recon; sid:200002962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgghh.pobyihw.cn",nocase; classtype:attempted-recon; sid:200002963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgghh.rgznjyu.cn",nocase; classtype:attempted-recon; sid:200002964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgghj.0e0d06u.cn",nocase; classtype:attempted-recon; sid:200002965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgghu.hellowy.cn",nocase; classtype:attempted-recon; sid:200002966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fghbn.kkuut.cn",nocase; classtype:attempted-recon; sid:200002967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fghdskjhgjhkljg.ihostfull.com",nocase; classtype:attempted-recon; sid:200002968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fghhh.3viaay.cn",nocase; classtype:attempted-recon; sid:200002969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fghjj.pytpov.cn",nocase; classtype:attempted-recon; sid:200002970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fghjj.qapkbz.cn",nocase; classtype:attempted-recon; sid:200002971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fghjj.unbpw3w.cn",nocase; classtype:attempted-recon; sid:200002972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fghjj.x4e9g3.cn",nocase; classtype:attempted-recon; sid:200002973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fghjk.wwhhw.cn",nocase; classtype:attempted-recon; sid:200002974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fghjr74rhudfguhtfguji.blogspot.com",nocase; classtype:attempted-recon; sid:200002975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fght.gttqyjz.cn",nocase; classtype:attempted-recon; sid:200002976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgm47k6.hyperphp.com",nocase; classtype:attempted-recon; sid:200002977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgn.39661.cn",nocase; classtype:attempted-recon; sid:200002978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgnfg.73989.cn",nocase; classtype:attempted-recon; sid:200002979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgrhf.kyxrmyy.cn",nocase; classtype:attempted-recon; sid:200002980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgrhhh.ericnothing.cn",nocase; classtype:attempted-recon; sid:200002981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgthuiuvzr.duckdns.org",nocase; classtype:attempted-recon; sid:200002982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgueavsehc.duckdns.org",nocase; classtype:attempted-recon; sid:200002983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhbffg.72912.cn",nocase; classtype:attempted-recon; sid:200002984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhd.76937.cn",nocase; classtype:attempted-recon; sid:200002985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhduf.pfucali.cn",nocase; classtype:attempted-recon; sid:200002986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhfgj.lxxrmyy.cn",nocase; classtype:attempted-recon; sid:200002987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhfn.cmxzyy.cn",nocase; classtype:attempted-recon; sid:200002988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhg.79176.cn",nocase; classtype:attempted-recon; sid:200002989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhjyk.zzssym2.cn",nocase; classtype:attempted-recon; sid:200002990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhn3ow24i8gf-0wrhg0-her-0ghbvn-0ehrg55g.obs.ap-southeast-2.myhuaweicloud.com",nocase; classtype:attempted-recon; sid:200002991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhtht.pmbobb.cn",nocase; classtype:attempted-recon; sid:200002992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhxotdijyt.duckdns.org",nocase; classtype:attempted-recon; sid:200002993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fibreglass.co.mz",nocase; classtype:attempted-recon; sid:200002994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fibtoesoyl.duckdns.org",nocase; classtype:attempted-recon; sid:200002995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fidelitybank-ng.online",nocase; classtype:attempted-recon; sid:200002996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fidelityinvestment-rope-350417.nn.r.appspot.com",nocase; classtype:attempted-recon; sid:200002997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fightagainstcriminal.com",nocase; classtype:attempted-recon; sid:200002998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fighting40s.com",nocase; classtype:attempted-recon; sid:200002999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"file-annual-project.cesfulenter.workers.dev",nocase; classtype:attempted-recon; sid:200003000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"file-cloud-download.remit-advance.workers.dev",nocase; classtype:attempted-recon; sid:200003001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"file-clouds-pdf.list-chats.workers.dev",nocase; classtype:attempted-recon; sid:200003002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"file-connect-shared.loading-chats.workers.dev",nocase; classtype:attempted-recon; sid:200003003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"file-pdf-cloud.voicee-pre.workers.dev",nocase; classtype:attempted-recon; sid:200003004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"file-project-shared.init-datings.workers.dev",nocase; classtype:attempted-recon; sid:200003005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"file-share-device-storage.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"file-share-device-storage.web.app",nocase; classtype:attempted-recon; sid:200003007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"file-share-drive-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"file-share-drive-folder.web.app",nocase; classtype:attempted-recon; sid:200003009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"file-share-login-folder-local.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"file-share-login-folder-local.web.app",nocase; classtype:attempted-recon; sid:200003011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"file-share-secu-doc.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"file-share-secu-doc.web.app",nocase; classtype:attempted-recon; sid:200003013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"file-shared-cloud.lepoyanecalt.workers.dev",nocase; classtype:attempted-recon; sid:200003014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"file-shared-clouds.data-shared.workers.dev",nocase; classtype:attempted-recon; sid:200003015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"file0z.onedrive0001.workers.dev",nocase; classtype:attempted-recon; sid:200003016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"files-secure-folder.ansimapreg.workers.dev",nocase; classtype:attempted-recon; sid:200003017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"files.landing-invoice.workers.dev",nocase; classtype:attempted-recon; sid:200003018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"files.recloud-shared.workers.dev",nocase; classtype:attempted-recon; sid:200003019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"filex.onedrive0001.workers.dev",nocase; classtype:attempted-recon; sid:200003020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"filex001.onedrive0001.workers.dev",nocase; classtype:attempted-recon; sid:200003021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fileyellowelite.com",nocase; classtype:attempted-recon; sid:200003022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"filezon.com",nocase; classtype:attempted-recon; sid:200003023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"film.jaheshguilan.com",nocase; classtype:attempted-recon; sid:200003024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"finalsolutions.eu",nocase; classtype:attempted-recon; sid:200003025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"financeadobesummary.pages.dev",nocase; classtype:attempted-recon; sid:200003026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"financeapp.xyz",nocase; classtype:attempted-recon; sid:200003027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"financeiro-portalpj.com",nocase; classtype:attempted-recon; sid:200003028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"find-maschine.com",nocase; classtype:attempted-recon; sid:200003029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"findccg.com",nocase; classtype:attempted-recon; sid:200003030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"finde-maschine.com",nocase; classtype:attempted-recon; sid:200003031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"finecoding.com",nocase; classtype:attempted-recon; sid:200003032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"finfutureonliup.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"finfutureonliup.web.app",nocase; classtype:attempted-recon; sid:200003034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"finukamila.lapassemarie.com",nocase; classtype:attempted-recon; sid:200003035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fiore-moda.com",nocase; classtype:attempted-recon; sid:200003036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fiqsrxmlgm.duckdns.org",nocase; classtype:attempted-recon; sid:200003037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fir-8da4d.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fir-8da4d.web.app",nocase; classtype:attempted-recon; sid:200003039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fire.martobang.workers.dev",nocase; classtype:attempted-recon; sid:200003040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firenaci0n4llogc.webcindario.com",nocase; classtype:attempted-recon; sid:200003041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firstsourcesbus.com",nocase; classtype:attempted-recon; sid:200003042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fitzherbert.xyz",nocase; classtype:attempted-recon; sid:200003043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fiverrespana.com",nocase; classtype:attempted-recon; sid:200003044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fivesplash.in",nocase; classtype:attempted-recon; sid:200003045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fixedcyberdisassembly.brouy.repl.co",nocase; classtype:attempted-recon; sid:200003046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fixemobileconnectinfoline.justns.ru",nocase; classtype:attempted-recon; sid:200003047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fixi.rest",nocase; classtype:attempted-recon; sid:200003048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fjfeaidykh.duckdns.org",nocase; classtype:attempted-recon; sid:200003049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fjjfjdf.sitey.me",nocase; classtype:attempted-recon; sid:200003050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fjpxzjcrui.duckdns.org",nocase; classtype:attempted-recon; sid:200003051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fjtnurxjlg.duckdns.org",nocase; classtype:attempted-recon; sid:200003052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fjyn.adsrmyy.cn",nocase; classtype:attempted-recon; sid:200003053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flash-swap.org",nocase; classtype:attempted-recon; sid:200003054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flashpushportal.myportfolio.com",nocase; classtype:attempted-recon; sid:200003055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flat-9be3.marpuasabentar.workers.dev",nocase; classtype:attempted-recon; sid:200003056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flat-grass-5595.fo4ih28x.workers.dev",nocase; classtype:attempted-recon; sid:200003057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flat-tree-7a42.julie6462.workers.dev",nocase; classtype:attempted-recon; sid:200003058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flcancer39-px.rtrk.com",nocase; classtype:attempted-recon; sid:200003059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flembqttal.duckdns.org",nocase; classtype:attempted-recon; sid:200003060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flintandtinder.org",nocase; classtype:attempted-recon; sid:200003061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flklsupbkf.duckdns.org",nocase; classtype:attempted-recon; sid:200003062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flkr66.hyperphp.com",nocase; classtype:attempted-recon; sid:200003063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flnkmniuzc.duckdns.org",nocase; classtype:attempted-recon; sid:200003064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"floral-glade-f27c.do050.workers.dev",nocase; classtype:attempted-recon; sid:200003065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"floral-sea-7b73.westernboy.workers.dev",nocase; classtype:attempted-recon; sid:200003066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"floranostra.hu",nocase; classtype:attempted-recon; sid:200003067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"florejackie.fr",nocase; classtype:attempted-recon; sid:200003068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"floridaglobaltrade.agroavance.com",nocase; classtype:attempted-recon; sid:200003069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowserve-us.com",nocase; classtype:attempted-recon; sid:200003070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fluksrv.mycpanel.rs",nocase; classtype:attempted-recon; sid:200003071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fluttergirl.com",nocase; classtype:attempted-recon; sid:200003072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flyairprestige.com",nocase; classtype:attempted-recon; sid:200003073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flybillw.com",nocase; classtype:attempted-recon; sid:200003074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flyvfrontier.net",nocase; classtype:attempted-recon; sid:200003075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fm100pakistan.com",nocase; classtype:attempted-recon; sid:200003076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fmp.wordpressmlm.com",nocase; classtype:attempted-recon; sid:200003077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fmrestclient.whileofone.com",nocase; classtype:attempted-recon; sid:200003078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fmvjkrhyul.duckdns.org",nocase; classtype:attempted-recon; sid:200003079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fmwtczjzwd.duckdns.org",nocase; classtype:attempted-recon; sid:200003080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fmxcpfxgqp.duckdns.org",nocase; classtype:attempted-recon; sid:200003081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fnft.67389.cn",nocase; classtype:attempted-recon; sid:200003082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fntn.cnsrmyy.cn",nocase; classtype:attempted-recon; sid:200003083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"focused-merkle.185-161-211-92.plesk.page",nocase; classtype:attempted-recon; sid:200003084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder-preview-project.privatee-inv.workers.dev",nocase; classtype:attempted-recon; sid:200003085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder-private-pdf.auth-gear.workers.dev",nocase; classtype:attempted-recon; sid:200003086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder-private-project.important-chat.workers.dev",nocase; classtype:attempted-recon; sid:200003087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder-private.erinlemono.workers.dev",nocase; classtype:attempted-recon; sid:200003088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder-shared-file.voice-chatt.workers.dev",nocase; classtype:attempted-recon; sid:200003089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder.verify-files.workers.dev",nocase; classtype:attempted-recon; sid:200003090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fomalitysary.com",nocase; classtype:attempted-recon; sid:200003091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"foratech.ca",nocase; classtype:attempted-recon; sid:200003092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forextradingtruth.com",nocase; classtype:attempted-recon; sid:200003093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form.submit.f08b.live",nocase; classtype:attempted-recon; sid:200003094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form.submit.f29a.live",nocase; classtype:attempted-recon; sid:200003095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form.submit.f33a.live",nocase; classtype:attempted-recon; sid:200003096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form.submit.f52b.live",nocase; classtype:attempted-recon; sid:200003097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form.tax.f57a.live",nocase; classtype:attempted-recon; sid:200003098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form.tax.f71a.live",nocase; classtype:attempted-recon; sid:200003099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form.tax.f81a.live",nocase; classtype:attempted-recon; sid:200003100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form.tax.f84a.live",nocase; classtype:attempted-recon; sid:200003101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"formbuddy.com",nocase; classtype:attempted-recon; sid:200003102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"formez-vous.eligibilite-web.com",nocase; classtype:attempted-recon; sid:200003103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.formium.io",nocase; classtype:attempted-recon; sid:200003104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.sendpulse.com",nocase; classtype:attempted-recon; sid:200003105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"formtools.com",nocase; classtype:attempted-recon; sid:200003106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forqysend.pl",nocase; classtype:attempted-recon; sid:200003107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fortheloveofscrapbook.com",nocase; classtype:attempted-recon; sid:200003108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fortul.com",nocase; classtype:attempted-recon; sid:200003109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fortus.cl",nocase; classtype:attempted-recon; sid:200003110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forum.square-enix.com-c.pw",nocase; classtype:attempted-recon; sid:200003111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fov-loginsupevents.ml",nocase; classtype:attempted-recon; sid:200003112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"foxshareportal.myportfolio.com",nocase; classtype:attempted-recon; sid:200003113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"foyzwatjjn.duckdns.org",nocase; classtype:attempted-recon; sid:200003114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fpalpha.myportfolio.com",nocase; classtype:attempted-recon; sid:200003115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fptg5-jyaaa-aaaad-qdoqq-cai.raw.ic0.app",nocase; classtype:attempted-recon; sid:200003116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fqvubrzuid.duckdns.org",nocase; classtype:attempted-recon; sid:200003117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fqxcsogcjo.duckdns.org",nocase; classtype:attempted-recon; sid:200003118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fr.filesusr.com",nocase; classtype:attempted-recon; sid:200003119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fragrant-dew-337b.orgetjot183.workers.dev",nocase; classtype:attempted-recon; sid:200003120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fragrant-grass-5770.scrtygdjahg.workers.dev",nocase; classtype:attempted-recon; sid:200003121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frances-onlines.com",nocase; classtype:attempted-recon; sid:200003122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"franchisefaqs.com",nocase; classtype:attempted-recon; sid:200003123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frankedu.com",nocase; classtype:attempted-recon; sid:200003124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frankfurtertsparkasse.web.app",nocase; classtype:attempted-recon; sid:200003125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frederic-scheid.com",nocase; classtype:attempted-recon; sid:200003126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"free-covid-19-stimulus-bonus.nethouse.ru",nocase; classtype:attempted-recon; sid:200003127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freechips.my.id",nocase; classtype:attempted-recon; sid:200003128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freecovid19testkits.com",nocase; classtype:attempted-recon; sid:200003129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freedomtg3656.club",nocase; classtype:attempted-recon; sid:200003130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freefantasybook.com",nocase; classtype:attempted-recon; sid:200003131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freeliker.net",nocase; classtype:attempted-recon; sid:200003132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freennn102729282.s3.fr-par.scw.cloud",nocase; classtype:attempted-recon; sid:200003133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freesolana.app",nocase; classtype:attempted-recon; sid:200003134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freesolanamining.com",nocase; classtype:attempted-recon; sid:200003135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freetopdomino.com",nocase; classtype:attempted-recon; sid:200003136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freg-nine.pt",nocase; classtype:attempted-recon; sid:200003137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freij.com",nocase; classtype:attempted-recon; sid:200003138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freim-regulation.hostfree.pw",nocase; classtype:attempted-recon; sid:200003139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frghb.taosbao.cn",nocase; classtype:attempted-recon; sid:200003140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frhty.cenegx.cn",nocase; classtype:attempted-recon; sid:200003141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"friendsofnechockey.com",nocase; classtype:attempted-recon; sid:200003142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frillyfrizzyinstitute.galicomprobar.repl.co",nocase; classtype:attempted-recon; sid:200003143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"friss.com.ec",nocase; classtype:attempted-recon; sid:200003144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frmsa.ml",nocase; classtype:attempted-recon; sid:200003145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"from-hand-to-hand.org",nocase; classtype:attempted-recon; sid:200003146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frontier-airlinesreservations.com",nocase; classtype:attempted-recon; sid:200003147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frosty-lab-d5f8.source0542-mail-docxs.workers.dev",nocase; classtype:attempted-recon; sid:200003148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frosty-leaf-b2cd.onos.workers.dev",nocase; classtype:attempted-recon; sid:200003149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frosty-mountain-332d.moldthread7435.workers.dev",nocase; classtype:attempted-recon; sid:200003150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frosty-mud-7abb.daritza.workers.dev",nocase; classtype:attempted-recon; sid:200003151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frosty-violet-0628.on.fleek.co",nocase; classtype:attempted-recon; sid:200003152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frr45l9.hyperphp.com",nocase; classtype:attempted-recon; sid:200003153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fsabkbapmz.duckdns.org",nocase; classtype:attempted-recon; sid:200003154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fsedc.wuxihr.cn",nocase; classtype:attempted-recon; sid:200003155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftdggz.hyperphp.com",nocase; classtype:attempted-recon; sid:200003156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftlateoymu.duckdns.org",nocase; classtype:attempted-recon; sid:200003157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftp.cnc.fr",nocase; classtype:attempted-recon; sid:200003158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-ca.com",nocase; classtype:attempted-recon; sid:200003159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-pro-register.pro",nocase; classtype:attempted-recon; sid:200003160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-register-pro.world",nocase; classtype:attempted-recon; sid:200003161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-register.biz",nocase; classtype:attempted-recon; sid:200003162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-register.website",nocase; classtype:attempted-recon; sid:200003163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-signup.pro",nocase; classtype:attempted-recon; sid:200003164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx.cool",nocase; classtype:attempted-recon; sid:200003165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx012.com",nocase; classtype:attempted-recon; sid:200003166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx569.com",nocase; classtype:attempted-recon; sid:200003167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx6.vip",nocase; classtype:attempted-recon; sid:200003168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx666888123ftxapp.com",nocase; classtype:attempted-recon; sid:200003169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx777.com",nocase; classtype:attempted-recon; sid:200003170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftxbic.com",nocase; classtype:attempted-recon; sid:200003171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftxbonus.site",nocase; classtype:attempted-recon; sid:200003172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftxcprotocol.xyz",nocase; classtype:attempted-recon; sid:200003173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fufaxh84js39fj2.webcindario.com",nocase; classtype:attempted-recon; sid:200003174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"full.mailboxs.workers.dev",nocase; classtype:attempted-recon; sid:200003175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"funholidaycrafts.com",nocase; classtype:attempted-recon; sid:200003176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"funiswap.exchange",nocase; classtype:attempted-recon; sid:200003177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"furryvengeancefve1.blogspot.com",nocase; classtype:attempted-recon; sid:200003178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"futec.futminna.edu.ng",nocase; classtype:attempted-recon; sid:200003179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fuxmedia.at",nocase; classtype:attempted-recon; sid:200003180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fuzzy-games-laugh-185-136-162-227.loca.lt",nocase; classtype:attempted-recon; sid:200003181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fvdftcstez.duckdns.org",nocase; classtype:attempted-recon; sid:200003182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fvesdfresr.duckdns.org",nocase; classtype:attempted-recon; sid:200003183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fwzf322.hyperphp.com",nocase; classtype:attempted-recon; sid:200003184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fx164fax08022022fax-1310019602.cos.eu-frankfurt.myqcloud.com",nocase; classtype:attempted-recon; sid:200003185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fx23032022fx1apps87-1310418193.cos.eu-frankfurt.myqcloud.com",nocase; classtype:attempted-recon; sid:200003186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fx406543docs4580246-1309906520.cos.eu-frankfurt.myqcloud.com",nocase; classtype:attempted-recon; sid:200003187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fx8822fax768fx7webs-1312962597.cos.ap-chongqing.myqcloud.com",nocase; classtype:attempted-recon; sid:200003188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fxhalifax.com",nocase; classtype:attempted-recon; sid:200003189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fxtimetrade247.com",nocase; classtype:attempted-recon; sid:200003190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fxxeyaozsh.duckdns.org",nocase; classtype:attempted-recon; sid:200003191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fyayiufaax.web.app",nocase; classtype:attempted-recon; sid:200003192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fycxgaimrc.duckdns.org",nocase; classtype:attempted-recon; sid:200003193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fyjsvz.webwave.dev",nocase; classtype:attempted-recon; sid:200003194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fymxrtqfvh.duckdns.org",nocase; classtype:attempted-recon; sid:200003195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fyndiqaq.cc",nocase; classtype:attempted-recon; sid:200003196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fyrozkt.top",nocase; classtype:attempted-recon; sid:200003197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fyrzgnpakp.duckdns.org",nocase; classtype:attempted-recon; sid:200003198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"g-mtcc.com",nocase; classtype:attempted-recon; sid:200003199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gabung.groupwhatsapp.shinxxdg.my.id",nocase; classtype:attempted-recon; sid:200003200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gafatay72-82jah.ydns.eu",nocase; classtype:attempted-recon; sid:200003201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gal1ciahom.alenfire19.repl.co",nocase; classtype:attempted-recon; sid:200003202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"galerieharmonia.com",nocase; classtype:attempted-recon; sid:200003203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gali123344.bancogalicia30.repl.co",nocase; classtype:attempted-recon; sid:200003204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gali43554320098987.887767556.repl.co",nocase; classtype:attempted-recon; sid:200003205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"galicia-vsinformacion.galicivs.repl.co",nocase; classtype:attempted-recon; sid:200003206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"galicia23bb21.andaneene2.repl.co",nocase; classtype:attempted-recon; sid:200003207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"galiciacaso29.repl.co",nocase; classtype:attempted-recon; sid:200003208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"galiciacuentaenalerta.galiciagana.repl.co",nocase; classtype:attempted-recon; sid:200003209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"galiciam.server1.trinchera.dev",nocase; classtype:attempted-recon; sid:200003210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"galiciaweb.josemicho.repl.co",nocase; classtype:attempted-recon; sid:200003211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"galiciquebe.webcindario.com",nocase; classtype:attempted-recon; sid:200003212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"galiciveri0912.jimenez9801.repl.co",nocase; classtype:attempted-recon; sid:200003213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"galiconlihome.s4000.repl.co",nocase; classtype:attempted-recon; sid:200003214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"galifactorservice.galifactor.repl.co",nocase; classtype:attempted-recon; sid:200003215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"galiiii.adskjfskf.repl.co",nocase; classtype:attempted-recon; sid:200003216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"galinkdj5614654.galidj61561465.repl.co",nocase; classtype:attempted-recon; sid:200003217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"galixxiia145.onli82922.repl.co",nocase; classtype:attempted-recon; sid:200003218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"game-defiknidgoms.com",nocase; classtype:attempted-recon; sid:200003219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"game.hicage.com",nocase; classtype:attempted-recon; sid:200003220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"garenaquafree.com",nocase; classtype:attempted-recon; sid:200003221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gatevalidation.com",nocase; classtype:attempted-recon; sid:200003222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gatewaytechitservices.com",nocase; classtype:attempted-recon; sid:200003223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gatlinburg-cabins-now.com",nocase; classtype:attempted-recon; sid:200003224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gb-evri-package.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gb-evri-package.web.app",nocase; classtype:attempted-recon; sid:200003226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gb-evri-parcel.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gb-evri-parcel.web.app",nocase; classtype:attempted-recon; sid:200003228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gbhn.iiddi.cn",nocase; classtype:attempted-recon; sid:200003229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gbhn.wanyiwl6.cn",nocase; classtype:attempted-recon; sid:200003230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gbvfd.npsadu.cn",nocase; classtype:attempted-recon; sid:200003231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gc.elin.co.za",nocase; classtype:attempted-recon; sid:200003232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gcdxb.gongshuban.cn",nocase; classtype:attempted-recon; sid:200003233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gdfgf.layerxu.cn",nocase; classtype:attempted-recon; sid:200003234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gdrh.hjszyy.cn",nocase; classtype:attempted-recon; sid:200003235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gdscxd.xmdzsw.cn",nocase; classtype:attempted-recon; sid:200003236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gdsdc.yg0i2qa.cn",nocase; classtype:attempted-recon; sid:200003237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gdsfoundationtrust.com",nocase; classtype:attempted-recon; sid:200003238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gdudqxdwlf.duckdns.org",nocase; classtype:attempted-recon; sid:200003239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geekd.live",nocase; classtype:attempted-recon; sid:200003240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geg.li",nocase; classtype:attempted-recon; sid:200003241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gemini-00e.blogspot.com",nocase; classtype:attempted-recon; sid:200003242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geminimobimovel.blogspot.com",nocase; classtype:attempted-recon; sid:200003243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"genehmigencorner.com",nocase; classtype:attempted-recon; sid:200003244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"general-pass-secur.fr",nocase; classtype:attempted-recon; sid:200003245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"general.auth5656.workers.dev",nocase; classtype:attempted-recon; sid:200003246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"general.bancorn.repl.co",nocase; classtype:attempted-recon; sid:200003247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"general.general-auth.workers.dev",nocase; classtype:attempted-recon; sid:200003248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"generateethereum.com",nocase; classtype:attempted-recon; sid:200003249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"genie-alba.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"genoeggs.me",nocase; classtype:attempted-recon; sid:200003251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gentl.bibirkumaumeletus.workers.dev",nocase; classtype:attempted-recon; sid:200003252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"georgehysmith.com",nocase; classtype:attempted-recon; sid:200003253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gerenciador-caixa-gov-login-th1.blogspot.com",nocase; classtype:attempted-recon; sid:200003254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gerenciadores-bb.org",nocase; classtype:attempted-recon; sid:200003255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gersgd.dabai658.cn",nocase; classtype:attempted-recon; sid:200003256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gestionarcitadaviviendaenlinea.com",nocase; classtype:attempted-recon; sid:200003257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gestionsigwebchile.com",nocase; classtype:attempted-recon; sid:200003258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"get-565hbgv5g6ftgfg6gf6gfg-more-identity-confirm-stard.tech",nocase; classtype:attempted-recon; sid:200003259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"get.freetopdomino.com",nocase; classtype:attempted-recon; sid:200003260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getaccformaincountcommunity.co.vu",nocase; classtype:attempted-recon; sid:200003261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getapps.vip",nocase; classtype:attempted-recon; sid:200003262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getfremlbb.com",nocase; classtype:attempted-recon; sid:200003263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getlikesfree.com",nocase; classtype:attempted-recon; sid:200003264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getme.co.nz",nocase; classtype:attempted-recon; sid:200003265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getmyoffercheck.ga",nocase; classtype:attempted-recon; sid:200003266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getwalletrecovery.com",nocase; classtype:attempted-recon; sid:200003267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geuntacqhl.duckdns.org",nocase; classtype:attempted-recon; sid:200003268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gevnitureluft029-b93464.ingress-baronn.ewp.live",nocase; classtype:attempted-recon; sid:200003269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfcbv.jq9par4.cn",nocase; classtype:attempted-recon; sid:200003270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfcvd.zhgxikw.cn",nocase; classtype:attempted-recon; sid:200003271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfcvn.bjckam.cn",nocase; classtype:attempted-recon; sid:200003272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfcxd.jfftinp.cn",nocase; classtype:attempted-recon; sid:200003273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfcxd.pmhotel.cn",nocase; classtype:attempted-recon; sid:200003274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdbv.9t9rd55.cn",nocase; classtype:attempted-recon; sid:200003275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdbv.a18ghsv.cn",nocase; classtype:attempted-recon; sid:200003276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdbv.uimcqnm.cn",nocase; classtype:attempted-recon; sid:200003277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdc.lingjuf.cn",nocase; classtype:attempted-recon; sid:200003278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdc.xaphoo.cn",nocase; classtype:attempted-recon; sid:200003279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcv.0ri30av.cn",nocase; classtype:attempted-recon; sid:200003280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcv.appfaster.cn",nocase; classtype:attempted-recon; sid:200003281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcv.gmj8lf.cn",nocase; classtype:attempted-recon; sid:200003282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcv.kggbhpu.cn",nocase; classtype:attempted-recon; sid:200003283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcv.kz8fp3y.cn",nocase; classtype:attempted-recon; sid:200003284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcv.mkhgxf.cn",nocase; classtype:attempted-recon; sid:200003285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcv.nmyt8sz.cn",nocase; classtype:attempted-recon; sid:200003286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcv.oghemr.cn",nocase; classtype:attempted-recon; sid:200003287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcv.rjnsztm.cn",nocase; classtype:attempted-recon; sid:200003288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcv.ujvceqz.cn",nocase; classtype:attempted-recon; sid:200003289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcv.ymubal.cn",nocase; classtype:attempted-recon; sid:200003290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcvg.cadlge.cn",nocase; classtype:attempted-recon; sid:200003291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcvn.xsbkjx.cn",nocase; classtype:attempted-recon; sid:200003292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcvx.lnupgl.cn",nocase; classtype:attempted-recon; sid:200003293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcvx.tykcpsj.cn",nocase; classtype:attempted-recon; sid:200003294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcvx.zhmyqxb.cn",nocase; classtype:attempted-recon; sid:200003295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcx.381cuvb.cn",nocase; classtype:attempted-recon; sid:200003296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcx.aywcfi.cn",nocase; classtype:attempted-recon; sid:200003297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcx.fhhzgvy.cn",nocase; classtype:attempted-recon; sid:200003298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcx.irivxmo.cn",nocase; classtype:attempted-recon; sid:200003299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcx.jrduqdl.cn",nocase; classtype:attempted-recon; sid:200003300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcx.tk90400.cn",nocase; classtype:attempted-recon; sid:200003301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcx.y77x3nn.cn",nocase; classtype:attempted-recon; sid:200003302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcx.yptotl.cn",nocase; classtype:attempted-recon; sid:200003303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcx.zaifwe.cn",nocase; classtype:attempted-recon; sid:200003304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcxb.jzszux.cn",nocase; classtype:attempted-recon; sid:200003305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdh.coqfyl.cn",nocase; classtype:attempted-recon; sid:200003306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdhb.etykbzg.cn",nocase; classtype:attempted-recon; sid:200003307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdnb.dj7nb8g.cn",nocase; classtype:attempted-recon; sid:200003308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdrvb.sqsfkav.cn",nocase; classtype:attempted-recon; sid:200003309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdsc.dkhfypx.cn",nocase; classtype:attempted-recon; sid:200003310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdsc.miazrbu.cn",nocase; classtype:attempted-recon; sid:200003311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdsc.mtipjs.cn",nocase; classtype:attempted-recon; sid:200003312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdsc.utztxs.cn",nocase; classtype:attempted-recon; sid:200003313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdscv.duiigtw.cn",nocase; classtype:attempted-recon; sid:200003314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdscx.pdxlel.cn",nocase; classtype:attempted-recon; sid:200003315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdscx.vgydddhcbnfffd.cn",nocase; classtype:attempted-recon; sid:200003316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdsv.y8va9u.cn",nocase; classtype:attempted-recon; sid:200003317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdsxc.objkanh.cn",nocase; classtype:attempted-recon; sid:200003318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdvc.3ukvx2k.cn",nocase; classtype:attempted-recon; sid:200003319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdvc.dovhwa.cn",nocase; classtype:attempted-recon; sid:200003320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdvc.pinghesf.cn",nocase; classtype:attempted-recon; sid:200003321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdvc.xlodgd.cn",nocase; classtype:attempted-recon; sid:200003322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfg.cq1t4.cn",nocase; classtype:attempted-recon; sid:200003323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfhqtnhcod.duckdns.org",nocase; classtype:attempted-recon; sid:200003324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfjmh.mged6yj.cn",nocase; classtype:attempted-recon; sid:200003325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfmpbjmcgu.duckdns.org",nocase; classtype:attempted-recon; sid:200003326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfnbj.vgydddhfjjkgfesx.cn",nocase; classtype:attempted-recon; sid:200003327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfsaedzfdrw.duckdns.org",nocase; classtype:attempted-recon; sid:200003328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfthc.surveysparrow.com",nocase; classtype:attempted-recon; sid:200003329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfvsedfre.duckdns.org",nocase; classtype:attempted-recon; sid:200003330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfxcx.willycaballero.cn",nocase; classtype:attempted-recon; sid:200003331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ggdfdfd.mfs.gg",nocase; classtype:attempted-recon; sid:200003332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ggffftfhhfft.byethost5.com",nocase; classtype:attempted-recon; sid:200003333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gggaliccci.gggall.repl.co",nocase; classtype:attempted-recon; sid:200003334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gghh.yaozhihang.cn",nocase; classtype:attempted-recon; sid:200003335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gghjj.edvjayw.cn",nocase; classtype:attempted-recon; sid:200003336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ggmagicd.s3.us-west-004.backblazeb2.com",nocase; classtype:attempted-recon; sid:200003337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ggnisbtuml.duckdns.org",nocase; classtype:attempted-recon; sid:200003338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ggsiqfxrau.duckdns.org",nocase; classtype:attempted-recon; sid:200003339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ggzlgfxmgt.duckdns.org",nocase; classtype:attempted-recon; sid:200003340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghafarleather.com",nocase; classtype:attempted-recon; sid:200003341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfcv.xybjcjf.cn",nocase; classtype:attempted-recon; sid:200003342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdc.hpzdvdu.cn",nocase; classtype:attempted-recon; sid:200003343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdc.je1yb3g.cn",nocase; classtype:attempted-recon; sid:200003344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdc.muwkubh.cn",nocase; classtype:attempted-recon; sid:200003345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdc.rtxdil.cn",nocase; classtype:attempted-recon; sid:200003346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdc.x9130w7.cn",nocase; classtype:attempted-recon; sid:200003347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdc.xzahtvq.cn",nocase; classtype:attempted-recon; sid:200003348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdcv.owydwj.cn",nocase; classtype:attempted-recon; sid:200003349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdd.ajoipk.cn",nocase; classtype:attempted-recon; sid:200003350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdhjhjhgfdfghyuytrbnmf.weeblysite.com",nocase; classtype:attempted-recon; sid:200003351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdrv.ixcrgzx.cn",nocase; classtype:attempted-recon; sid:200003352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdv.akegwb.cn",nocase; classtype:attempted-recon; sid:200003353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdv.hg6yz.cn",nocase; classtype:attempted-recon; sid:200003354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdv.jjqhaw.cn",nocase; classtype:attempted-recon; sid:200003355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdv.lucvni.cn",nocase; classtype:attempted-recon; sid:200003356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdv.mboefv.cn",nocase; classtype:attempted-recon; sid:200003357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdv.sybrfa.cn",nocase; classtype:attempted-recon; sid:200003358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdv.xgdfrh.cn",nocase; classtype:attempted-recon; sid:200003359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdv.ygcqbxs.cn",nocase; classtype:attempted-recon; sid:200003360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdv.ymgvtj.cn",nocase; classtype:attempted-recon; sid:200003361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdvc.bnhbwr.cn",nocase; classtype:attempted-recon; sid:200003362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdxc.jkilvf.cn",nocase; classtype:attempted-recon; sid:200003363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfn.gaxrmyy.cn",nocase; classtype:attempted-recon; sid:200003364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfvd.w4jghrh.cn",nocase; classtype:attempted-recon; sid:200003365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghgjhhhhhghjjggjjhghjhgjjhgghjghhjghjjg.myportfolio.com",nocase; classtype:attempted-recon; sid:200003366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghhhj.deyuanshuyuan.cn",nocase; classtype:attempted-recon; sid:200003367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghhjk.moshutv.cn",nocase; classtype:attempted-recon; sid:200003368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghjjk.uistage.cn",nocase; classtype:attempted-recon; sid:200003369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghjnm.nnaae.cn",nocase; classtype:attempted-recon; sid:200003370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghjyr.pmlqayi.cn",nocase; classtype:attempted-recon; sid:200003371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghmm.jcmmzz.cn",nocase; classtype:attempted-recon; sid:200003372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghorana.com",nocase; classtype:attempted-recon; sid:200003373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghyfdr.kfrqrjp.cn",nocase; classtype:attempted-recon; sid:200003374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gib-brou.plsverifique.repl.co",nocase; classtype:attempted-recon; sid:200003375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gigvpqiupa.duckdns.org",nocase; classtype:attempted-recon; sid:200003376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gijgpary.liveblog365.com",nocase; classtype:attempted-recon; sid:200003377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"girls-tube.mobi",nocase; classtype:attempted-recon; sid:200003378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"giveaway-darwinia.com",nocase; classtype:attempted-recon; sid:200003379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"giveaway-decentral.com",nocase; classtype:attempted-recon; sid:200003380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gjihkjsogc.duckdns.org",nocase; classtype:attempted-recon; sid:200003381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"glacierbank.dvrlists.com",nocase; classtype:attempted-recon; sid:200003382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gladbachnasen.de",nocase; classtype:attempted-recon; sid:200003383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"glbxvyp.top",nocase; classtype:attempted-recon; sid:200003384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"glennrothenberg.com",nocase; classtype:attempted-recon; sid:200003385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"globalpatron.com",nocase; classtype:attempted-recon; sid:200003386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"globovidrosss.blogspot.com",nocase; classtype:attempted-recon; sid:200003387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"glogo.org",nocase; classtype:attempted-recon; sid:200003388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"glsword.com",nocase; classtype:attempted-recon; sid:200003389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gmgqumxgla.duckdns.org",nocase; classtype:attempted-recon; sid:200003390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gmgroupllc.co",nocase; classtype:attempted-recon; sid:200003391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gmnomemines.com",nocase; classtype:attempted-recon; sid:200003392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gnfd.bajiaofunction.cn",nocase; classtype:attempted-recon; sid:200003393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gnosis-sefe.com",nocase; classtype:attempted-recon; sid:200003394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go-indies.com",nocase; classtype:attempted-recon; sid:200003395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.ly",nocase; classtype:attempted-recon; sid:200003396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.soxxa.co",nocase; classtype:attempted-recon; sid:200003397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go24link.com",nocase; classtype:attempted-recon; sid:200003398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gociate.com",nocase; classtype:attempted-recon; sid:200003399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"godocusign-login.rackapp.workers.dev",nocase; classtype:attempted-recon; sid:200003400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"goeyonmegs.duckdns.org",nocase; classtype:attempted-recon; sid:200003401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gohaui.com",nocase; classtype:attempted-recon; sid:200003402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"golittlebig.com",nocase; classtype:attempted-recon; sid:200003403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gonzaleztransformacion.com.mx",nocase; classtype:attempted-recon; sid:200003404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"good12345.tripod.com",nocase; classtype:attempted-recon; sid:200003405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"goodratespecial.com.ng",nocase; classtype:attempted-recon; sid:200003406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gov.mylogin-au.com",nocase; classtype:attempted-recon; sid:200003407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gpcarautocenter-web-sand-home.blogspot.com",nocase; classtype:attempted-recon; sid:200003408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gqhxbaqmql.duckdns.org",nocase; classtype:attempted-recon; sid:200003409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gqklcdswpu.duckdns.org",nocase; classtype:attempted-recon; sid:200003410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gqpmwuttee.duckdns.org",nocase; classtype:attempted-recon; sid:200003411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grandluxorhotels.com",nocase; classtype:attempted-recon; sid:200003412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"graphic-boulder-301015.web.app",nocase; classtype:attempted-recon; sid:200003413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"graphics.gradenstore.com",nocase; classtype:attempted-recon; sid:200003414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gravel-dour-chokeberry.glitch.me",nocase; classtype:attempted-recon; sid:200003415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"graydovesgrace.com",nocase; classtype:attempted-recon; sid:200003416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"graysonwarlick.myportfolio.com",nocase; classtype:attempted-recon; sid:200003417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grcslnbqeu.duckdns.org",nocase; classtype:attempted-recon; sid:200003418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"green--dream--6331-on-fleek-co.translate.goog",nocase; classtype:attempted-recon; sid:200003419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"green-pine-7fe7.do020.workers.dev",nocase; classtype:attempted-recon; sid:200003420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"green-surf-5642.5pi4f9jl.workers.dev",nocase; classtype:attempted-recon; sid:200003421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"greenland.co.mz",nocase; classtype:attempted-recon; sid:200003422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"greenlifeconcierge.com",nocase; classtype:attempted-recon; sid:200003423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"greentradeenergy.za.com",nocase; classtype:attempted-recon; sid:200003424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"greenvonline.com",nocase; classtype:attempted-recon; sid:200003425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"greenwayweb.com",nocase; classtype:attempted-recon; sid:200003426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"greyhillconsulting.com",nocase; classtype:attempted-recon; sid:200003427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grfe.723k3s.cn",nocase; classtype:attempted-recon; sid:200003428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grhd.37633.cn",nocase; classtype:attempted-recon; sid:200003429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"groupesuseg.com.br",nocase; classtype:attempted-recon; sid:200003430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grove-5bd0a.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grove-5bd0a.web.app",nocase; classtype:attempted-recon; sid:200003432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grumpyrobustphase.galiciabank1.repl.co",nocase; classtype:attempted-recon; sid:200003433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupn2k.com",nocase; classtype:attempted-recon; sid:200003434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupo.ultimatefreehost.in",nocase; classtype:attempted-recon; sid:200003435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupodetrabajo.hostfree.pw",nocase; classtype:attempted-recon; sid:200003436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupoelectorial.hostfree.pw",nocase; classtype:attempted-recon; sid:200003437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupoexitopaya.hostfree.pw",nocase; classtype:attempted-recon; sid:200003438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupofsp.com.br",nocase; classtype:attempted-recon; sid:200003439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupolmi.com",nocase; classtype:attempted-recon; sid:200003440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupoosinez.hostfree.pw",nocase; classtype:attempted-recon; sid:200003441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gskjmob.top",nocase; classtype:attempted-recon; sid:200003442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gsmpublisher.in",nocase; classtype:attempted-recon; sid:200003443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gsrcx.shgdmy.cn",nocase; classtype:attempted-recon; sid:200003444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gsrl90.hyperphp.com",nocase; classtype:attempted-recon; sid:200003445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gtigrovvs.com",nocase; classtype:attempted-recon; sid:200003446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gtyaner.com",nocase; classtype:attempted-recon; sid:200003447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"guidesrv-infode.de",nocase; classtype:attempted-recon; sid:200003448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"guijloppxq.duckdns.org",nocase; classtype:attempted-recon; sid:200003449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"guprosselecto.hostfree.pw",nocase; classtype:attempted-recon; sid:200003450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gurukanth.com",nocase; classtype:attempted-recon; sid:200003451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"guttercatgang.free-drop.live",nocase; classtype:attempted-recon; sid:200003452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"guwzzvxusj.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gvesdfrw.duckdns.org",nocase; classtype:attempted-recon; sid:200003454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gvghh.wei-zhe.cn",nocase; classtype:attempted-recon; sid:200003455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gvguon.club",nocase; classtype:attempted-recon; sid:200003456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gvismqmkta.duckdns.org",nocase; classtype:attempted-recon; sid:200003457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gvvymuyaae.duckdns.org",nocase; classtype:attempted-recon; sid:200003458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gwijipoekb.duckdns.org",nocase; classtype:attempted-recon; sid:200003459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gxa1ij.webwave.dev",nocase; classtype:attempted-recon; sid:200003460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gxxyvrkunu.duckdns.org",nocase; classtype:attempted-recon; sid:200003461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gybkp-yaaaa-aaaad-qdoya-cai.raw.ic0.app",nocase; classtype:attempted-recon; sid:200003462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gyfsktaubm.duckdns.org",nocase; classtype:attempted-recon; sid:200003463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gytpoemkuc.duckdns.org",nocase; classtype:attempted-recon; sid:200003464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gyxbasfuiy.duckdns.org",nocase; classtype:attempted-recon; sid:200003465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.b2bxjea.com",nocase; classtype:attempted-recon; sid:200003466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.biupqoc.com",nocase; classtype:attempted-recon; sid:200003467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.coinbaive.com",nocase; classtype:attempted-recon; sid:200003468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.croknqp.top",nocase; classtype:attempted-recon; sid:200003469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.cwghjv.com",nocase; classtype:attempted-recon; sid:200003470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.eurexsih.com",nocase; classtype:attempted-recon; sid:200003471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.eurexvky.cc",nocase; classtype:attempted-recon; sid:200003472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.fxzqpgl.top",nocase; classtype:attempted-recon; sid:200003473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun18732.top",nocase; classtype:attempted-recon; sid:200003474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun18876.top",nocase; classtype:attempted-recon; sid:200003475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun37352.top",nocase; classtype:attempted-recon; sid:200003476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun58122.top",nocase; classtype:attempted-recon; sid:200003477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun68299.top",nocase; classtype:attempted-recon; sid:200003478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun79595.top",nocase; classtype:attempted-recon; sid:200003479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun80385.top",nocase; classtype:attempted-recon; sid:200003480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun93676.top",nocase; classtype:attempted-recon; sid:200003481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gobsaym.top",nocase; classtype:attempted-recon; sid:200003482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.hifly57326.top",nocase; classtype:attempted-recon; sid:200003483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.hiflyk28075.top",nocase; classtype:attempted-recon; sid:200003484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.hsnhc321.top",nocase; classtype:attempted-recon; sid:200003485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.jhafrwo.top",nocase; classtype:attempted-recon; sid:200003486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.jkozclh.top",nocase; classtype:attempted-recon; sid:200003487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.kgoumav.top",nocase; classtype:attempted-recon; sid:200003488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.kpdwpl785.top",nocase; classtype:attempted-recon; sid:200003489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.mhevtwo.top",nocase; classtype:attempted-recon; sid:200003490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.miaycel.top",nocase; classtype:attempted-recon; sid:200003491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.npsltvr.top",nocase; classtype:attempted-recon; sid:200003492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.rkhiyza.top",nocase; classtype:attempted-recon; sid:200003493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.srpgyuc.top",nocase; classtype:attempted-recon; sid:200003494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.tmaeqcr.top",nocase; classtype:attempted-recon; sid:200003495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.zxgiqvb.top",nocase; classtype:attempted-recon; sid:200003496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"habbocreditosparati.blogspot.com",nocase; classtype:attempted-recon; sid:200003497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"habeshasteel.com",nocase; classtype:attempted-recon; sid:200003498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"habi10100200.liveblog365.com",nocase; classtype:attempted-recon; sid:200003499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hadiah17agustusdomino.com",nocase; classtype:attempted-recon; sid:200003500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hadiahchip.com",nocase; classtype:attempted-recon; sid:200003501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hahdaeupdate.es.tl",nocase; classtype:attempted-recon; sid:200003502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"halaman.zyrosite.com",nocase; classtype:attempted-recon; sid:200003503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"halibabe22.wixsite.com",nocase; classtype:attempted-recon; sid:200003504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"halibotton.in",nocase; classtype:attempted-recon; sid:200003505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"handakai.github.io",nocase; classtype:attempted-recon; sid:200003506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hands-that-serve.my.id",nocase; classtype:attempted-recon; sid:200003507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"handsome-dapper-hyacinth.glitch.me",nocase; classtype:attempted-recon; sid:200003508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"handvina.com",nocase; classtype:attempted-recon; sid:200003509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"handykza.za.com",nocase; classtype:attempted-recon; sid:200003510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hangovertest1.blogspot.com",nocase; classtype:attempted-recon; sid:200003511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hanksdavid84.github.io",nocase; classtype:attempted-recon; sid:200003512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hannite.foodspotec.com",nocase; classtype:attempted-recon; sid:200003513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"haroldhazard1-wixsite-com.filesusr.com",nocase; classtype:attempted-recon; sid:200003514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"harqegtppq.duckdns.org",nocase; classtype:attempted-recon; sid:200003515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hatocorozal.com",nocase; classtype:attempted-recon; sid:200003516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"haunlimited.org",nocase; classtype:attempted-recon; sid:200003517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"havas.fr",nocase; classtype:attempted-recon; sid:200003518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"havasgroup.com.au",nocase; classtype:attempted-recon; sid:200003519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hbhvv.rxrmyy.cn",nocase; classtype:attempted-recon; sid:200003520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hbmkuxhrrb.duckdns.org",nocase; classtype:attempted-recon; sid:200003521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hdcxs.nf5p45.cn",nocase; classtype:attempted-recon; sid:200003522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hdfhf.ntyuatc.cn",nocase; classtype:attempted-recon; sid:200003523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hdufhe.piusnzy.cn",nocase; classtype:attempted-recon; sid:200003524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hduwhd.oolaojf.cn",nocase; classtype:attempted-recon; sid:200003525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"healthatlums.web.app",nocase; classtype:attempted-recon; sid:200003526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"heartflo.health",nocase; classtype:attempted-recon; sid:200003527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hechoparati.hostfree.pw",nocase; classtype:attempted-recon; sid:200003528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hechosoloparati.byethost3.com",nocase; classtype:attempted-recon; sid:200003529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hedefpanel.net",nocase; classtype:attempted-recon; sid:200003530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"heinthu1.github.io",nocase; classtype:attempted-recon; sid:200003531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hellenic-post.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hellenic-post.web.app",nocase; classtype:attempted-recon; sid:200003533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hellenic-postbank.com",nocase; classtype:attempted-recon; sid:200003534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help-vystarcu.com",nocase; classtype:attempted-recon; sid:200003535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help.insecur.saftyalert.workers.dev",nocase; classtype:attempted-recon; sid:200003536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help.validation-page.workers.dev",nocase; classtype:attempted-recon; sid:200003537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help7070-support22.cc",nocase; classtype:attempted-recon; sid:200003538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"helpcasaemeta.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"helpcasaemeta.web.app",nocase; classtype:attempted-recon; sid:200003540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"helpcase.service10545216541.com",nocase; classtype:attempted-recon; sid:200003541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"helpcasefbmeta.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"helpcasefbmeta.web.app",nocase; classtype:attempted-recon; sid:200003543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"helpcaseid19786543621962.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"helpcaseid19786543621962.web.app",nocase; classtype:attempted-recon; sid:200003545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"helpdeskzimbra.cliven.cl",nocase; classtype:attempted-recon; sid:200003546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hendaklahengkau.martulangsore.workers.dev",nocase; classtype:attempted-recon; sid:200003547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"henry.tiny.us",nocase; classtype:attempted-recon; sid:200003548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hercarresf.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hercarresf.web.app",nocase; classtype:attempted-recon; sid:200003550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hertzclubdk.com",nocase; classtype:attempted-recon; sid:200003551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hervochapiteaux.blogspot.com",nocase; classtype:attempted-recon; sid:200003552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"heyturlock.com",nocase; classtype:attempted-recon; sid:200003553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hf-hf-hf.com",nocase; classtype:attempted-recon; sid:200003554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfcxd.bzequa.cn",nocase; classtype:attempted-recon; sid:200003555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcd.dp1a22l.cn",nocase; classtype:attempted-recon; sid:200003556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcv.iacw.cn",nocase; classtype:attempted-recon; sid:200003557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcv.ieqdevh.cn",nocase; classtype:attempted-recon; sid:200003558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcv.ifuf.cn",nocase; classtype:attempted-recon; sid:200003559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcv.jy9onx4.cn",nocase; classtype:attempted-recon; sid:200003560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcv.prnncdu.cn",nocase; classtype:attempted-recon; sid:200003561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcv.sqdysbd.cn",nocase; classtype:attempted-recon; sid:200003562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcv.todqyd.cn",nocase; classtype:attempted-recon; sid:200003563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcvx.pgxbikd.cn",nocase; classtype:attempted-recon; sid:200003564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcvx.vxqnfi.cn",nocase; classtype:attempted-recon; sid:200003565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcvx.wdgdjgmukpajjtmp.cn",nocase; classtype:attempted-recon; sid:200003566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcx.bmovfzw.cn",nocase; classtype:attempted-recon; sid:200003567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcx.dj7e5ab.cn",nocase; classtype:attempted-recon; sid:200003568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcx.gssakte.cn",nocase; classtype:attempted-recon; sid:200003569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcx.h1h9f03.cn",nocase; classtype:attempted-recon; sid:200003570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcx.kdsgktx.cn",nocase; classtype:attempted-recon; sid:200003571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcx.kz0a8z.cn",nocase; classtype:attempted-recon; sid:200003572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcx.qigynbs.cn",nocase; classtype:attempted-recon; sid:200003573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcx.w4u8q1x.cn",nocase; classtype:attempted-recon; sid:200003574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcx.wcx0ke3.cn",nocase; classtype:attempted-recon; sid:200003575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcx.x3owf9f.cn",nocase; classtype:attempted-recon; sid:200003576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdvb.40m84j.cn",nocase; classtype:attempted-recon; sid:200003577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdvc.yj6p41y.cn",nocase; classtype:attempted-recon; sid:200003578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdx.stonecreek.cn",nocase; classtype:attempted-recon; sid:200003579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdxc.0mfgen7.cn",nocase; classtype:attempted-recon; sid:200003580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdxc.t6zek56.cn",nocase; classtype:attempted-recon; sid:200003581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgbv.rxrmzc.cn",nocase; classtype:attempted-recon; sid:200003582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgcv.gurbrkx.cn",nocase; classtype:attempted-recon; sid:200003583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgcv.nlidsz.cn",nocase; classtype:attempted-recon; sid:200003584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgcv.pmvrpl.cn",nocase; classtype:attempted-recon; sid:200003585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgcv.qydjxyz.cn",nocase; classtype:attempted-recon; sid:200003586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgcv.yysjdea.cn",nocase; classtype:attempted-recon; sid:200003587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgcv.zbgvqeg.cn",nocase; classtype:attempted-recon; sid:200003588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgcx.thiambu.cn",nocase; classtype:attempted-recon; sid:200003589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgcx.w86cb3j.cn",nocase; classtype:attempted-recon; sid:200003590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdbv.vpcvyg.cn",nocase; classtype:attempted-recon; sid:200003591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdc.djiguyk.cn",nocase; classtype:attempted-recon; sid:200003592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdc.esjvebe.cn",nocase; classtype:attempted-recon; sid:200003593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdc.gtencgf.cn",nocase; classtype:attempted-recon; sid:200003594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdc.lysbwim.cn",nocase; classtype:attempted-recon; sid:200003595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdcv.50k6aw0.cn",nocase; classtype:attempted-recon; sid:200003596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdcv.htkvjwluwzb.cn",nocase; classtype:attempted-recon; sid:200003597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdcv.wjargy.cn",nocase; classtype:attempted-recon; sid:200003598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdcv.xiamumu.cn",nocase; classtype:attempted-recon; sid:200003599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdcv.xxl1exy.cn",nocase; classtype:attempted-recon; sid:200003600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdv.1yawwr.cn",nocase; classtype:attempted-recon; sid:200003601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdv.agmebm.cn",nocase; classtype:attempted-recon; sid:200003602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdv.ck1bd.cn",nocase; classtype:attempted-recon; sid:200003603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdv.mvjarhs.cn",nocase; classtype:attempted-recon; sid:200003604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdv.oqajgn.cn",nocase; classtype:attempted-recon; sid:200003605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdv.t0l0np8.cn",nocase; classtype:attempted-recon; sid:200003606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdv.ycrbrqf.cn",nocase; classtype:attempted-recon; sid:200003607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdvb.ugmpeow.cn",nocase; classtype:attempted-recon; sid:200003608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgfcv.vjtzyd.cn",nocase; classtype:attempted-recon; sid:200003609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgvb.duzm78.cn",nocase; classtype:attempted-recon; sid:200003610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgvc.aqjkhn.cn",nocase; classtype:attempted-recon; sid:200003611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgvc.shzbxw.cn",nocase; classtype:attempted-recon; sid:200003612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgvc.smsvpf.cn",nocase; classtype:attempted-recon; sid:200003613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgvc.wgwinn.cn",nocase; classtype:attempted-recon; sid:200003614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfmsgltpqp.duckdns.org",nocase; classtype:attempted-recon; sid:200003615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfn.85776.cn",nocase; classtype:attempted-recon; sid:200003616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hftgd.aq12rwh.cn",nocase; classtype:attempted-recon; sid:200003617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hftgd.hmrwpki.cn",nocase; classtype:attempted-recon; sid:200003618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hftrgkjn.cxxrmyy.cn",nocase; classtype:attempted-recon; sid:200003619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfvvodpemj.duckdns.org",nocase; classtype:attempted-recon; sid:200003620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hg5566dh.com",nocase; classtype:attempted-recon; sid:200003621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hg5566gx.com",nocase; classtype:attempted-recon; sid:200003622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hg785609354.wixsite.com",nocase; classtype:attempted-recon; sid:200003623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgbvf.muvrcyu.cn",nocase; classtype:attempted-recon; sid:200003624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgcvxd.rkkeirk.cn",nocase; classtype:attempted-recon; sid:200003625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgcxd.zmouil7.cn",nocase; classtype:attempted-recon; sid:200003626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfbvc.ztqzksh.cn",nocase; classtype:attempted-recon; sid:200003627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfcv.7zcf9tu.cn",nocase; classtype:attempted-recon; sid:200003628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfcv.deayekq.cn",nocase; classtype:attempted-recon; sid:200003629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfcv.dsszmxb.cn",nocase; classtype:attempted-recon; sid:200003630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfcv.e0wvned.cn",nocase; classtype:attempted-recon; sid:200003631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfcv.gkjuel.cn",nocase; classtype:attempted-recon; sid:200003632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfcv.jtcwxol.cn",nocase; classtype:attempted-recon; sid:200003633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfcv.olclqwh.cn",nocase; classtype:attempted-recon; sid:200003634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfcv.zlytuu.cn",nocase; classtype:attempted-recon; sid:200003635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfcvs.ugydieb.cn",nocase; classtype:attempted-recon; sid:200003636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfdcv.ijuu.cn",nocase; classtype:attempted-recon; sid:200003637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfdcv.ndsnoeq.cn",nocase; classtype:attempted-recon; sid:200003638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfdcx.oxiiisn.cn",nocase; classtype:attempted-recon; sid:200003639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfdv.kojjqy1.cn",nocase; classtype:attempted-recon; sid:200003640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfvc.gjghqw.cn",nocase; classtype:attempted-recon; sid:200003641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfvc.sxtamt.cn",nocase; classtype:attempted-recon; sid:200003642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfxc.yipindaotv.cn",nocase; classtype:attempted-recon; sid:200003643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hggwydovjn.duckdns.org",nocase; classtype:attempted-recon; sid:200003644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hghfd.qd6i0b.cn",nocase; classtype:attempted-recon; sid:200003645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hghgb.xjxzyy.cn",nocase; classtype:attempted-recon; sid:200003646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hghjhkjjgg.vfgjkkhglkl.workers.dev",nocase; classtype:attempted-recon; sid:200003647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgxpkjmscc.duckdns.org",nocase; classtype:attempted-recon; sid:200003648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hh7n2-5yaaa-aaaad-qdrza-cai.ic0.app",nocase; classtype:attempted-recon; sid:200003649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hhjj.niujiangwei.cn",nocase; classtype:attempted-recon; sid:200003650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hhjj.ucgows.cn",nocase; classtype:attempted-recon; sid:200003651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hhjjj.zzazy.cn",nocase; classtype:attempted-recon; sid:200003652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hhjkk.txydihu.cn",nocase; classtype:attempted-recon; sid:200003653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hidden-mud-9b49.offiice.workers.dev",nocase; classtype:attempted-recon; sid:200003654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly01569.top",nocase; classtype:attempted-recon; sid:200003655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly10365.top",nocase; classtype:attempted-recon; sid:200003656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly21173.top",nocase; classtype:attempted-recon; sid:200003657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly27702.top",nocase; classtype:attempted-recon; sid:200003658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly57326.top",nocase; classtype:attempted-recon; sid:200003659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly62556.top",nocase; classtype:attempted-recon; sid:200003660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly85295.top",nocase; classtype:attempted-recon; sid:200003661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly96975.top",nocase; classtype:attempted-recon; sid:200003662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiflyk27793.top",nocase; classtype:attempted-recon; sid:200003663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiflyk47344.top",nocase; classtype:attempted-recon; sid:200003664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiflyk66656.top",nocase; classtype:attempted-recon; sid:200003665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiflyk70213.top",nocase; classtype:attempted-recon; sid:200003666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hikhpyiwnw.duckdns.org",nocase; classtype:attempted-recon; sid:200003667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hillandhappylanka.com",nocase; classtype:attempted-recon; sid:200003668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"himalayansherpa.com.au",nocase; classtype:attempted-recon; sid:200003669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"himbauane.blogspot.com",nocase; classtype:attempted-recon; sid:200003670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hingehealths.com",nocase; classtype:attempted-recon; sid:200003671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hip-burly-paranthodon.glitch.me",nocase; classtype:attempted-recon; sid:200003672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiper2m.taplink.ws",nocase; classtype:attempted-recon; sid:200003673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiperconsultamaio.com",nocase; classtype:attempted-recon; sid:200003674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hipersexta2m.com",nocase; classtype:attempted-recon; sid:200003675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hisoftsxwnf.web.app",nocase; classtype:attempted-recon; sid:200003676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitman71hd-wixsite-com.filesusr.com",nocase; classtype:attempted-recon; sid:200003677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hj52rs.hyperphp.com",nocase; classtype:attempted-recon; sid:200003678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjdgfgdh.hostfree.pw",nocase; classtype:attempted-recon; sid:200003679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjepsifkbn.duckdns.org",nocase; classtype:attempted-recon; sid:200003680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgb.aksoga.cn",nocase; classtype:attempted-recon; sid:200003681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgb.bpnupb.cn",nocase; classtype:attempted-recon; sid:200003682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgb.ycslab.cn",nocase; classtype:attempted-recon; sid:200003683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgbv.0azng8p.cn",nocase; classtype:attempted-recon; sid:200003684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgc.xsqnoij.cn",nocase; classtype:attempted-recon; sid:200003685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgcv.drhp13t.cn",nocase; classtype:attempted-recon; sid:200003686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgcv.mjomksa.cn",nocase; classtype:attempted-recon; sid:200003687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgcv.oamkww.cn",nocase; classtype:attempted-recon; sid:200003688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgcv.tj0wtkr.cn",nocase; classtype:attempted-recon; sid:200003689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgcv.vxrxqz.cn",nocase; classtype:attempted-recon; sid:200003690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgcv.yrhdohc.cn",nocase; classtype:attempted-recon; sid:200003691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgcx.ltgkyy.cn",nocase; classtype:attempted-recon; sid:200003692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgv.ljeyvc.cn",nocase; classtype:attempted-recon; sid:200003693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgv.szjyaq.cn",nocase; classtype:attempted-recon; sid:200003694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgv.ximogi.cn",nocase; classtype:attempted-recon; sid:200003695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgv.zfzreb.cn",nocase; classtype:attempted-recon; sid:200003696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgv.zkejrtr.cn",nocase; classtype:attempted-recon; sid:200003697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgvc.gaiuiwv.cn",nocase; classtype:attempted-recon; sid:200003698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgvc.jtebnll.cn",nocase; classtype:attempted-recon; sid:200003699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjftgv.k0p0qnw.cn",nocase; classtype:attempted-recon; sid:200003700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjftgvc.ekqskvi.cn",nocase; classtype:attempted-recon; sid:200003701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjgcv.bmcvzjk.cn",nocase; classtype:attempted-recon; sid:200003702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjgfvc.jxxom76.cn",nocase; classtype:attempted-recon; sid:200003703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjgsgjsfhsut.webcindario.com",nocase; classtype:attempted-recon; sid:200003704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjhadveurx231.dynssl.com",nocase; classtype:attempted-recon; sid:200003705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjhjhgjkhjk.vfgjkkhglkl.workers.dev",nocase; classtype:attempted-recon; sid:200003706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjjikk.shangjie56.cn",nocase; classtype:attempted-recon; sid:200003707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjkg.bajiaoshop.cn",nocase; classtype:attempted-recon; sid:200003708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjknm.uuwwu.cn",nocase; classtype:attempted-recon; sid:200003709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjy87hjy87.hyperphp.com",nocase; classtype:attempted-recon; sid:200003710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hm.ru",nocase; classtype:attempted-recon; sid:200003711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hmbmvtkoai.duckdns.org",nocase; classtype:attempted-recon; sid:200003712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hmobjetnlc.duckdns.org",nocase; classtype:attempted-recon; sid:200003713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hmtilshrai.duckdns.org",nocase; classtype:attempted-recon; sid:200003714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hnvdjsgrrs.duckdns.org",nocase; classtype:attempted-recon; sid:200003715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hobvernewus.itsaol.com",nocase; classtype:attempted-recon; sid:200003716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoggdpsqul.duckdns.org",nocase; classtype:attempted-recon; sid:200003717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoje-registro-solucoes.com",nocase; classtype:attempted-recon; sid:200003718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoje-temos-solucoes.com",nocase; classtype:attempted-recon; sid:200003719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hokapolskaonline.com",nocase; classtype:attempted-recon; sid:200003720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"holding-energy.ru",nocase; classtype:attempted-recon; sid:200003721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"holidaysinkerala.org",nocase; classtype:attempted-recon; sid:200003722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"holy-disk-fe09.valeracooper00.workers.dev",nocase; classtype:attempted-recon; sid:200003723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"holy-pine-586f.mariosa5862.workers.dev",nocase; classtype:attempted-recon; sid:200003724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"holzzkqmug.duckdns.org",nocase; classtype:attempted-recon; sid:200003725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homadecook.com",nocase; classtype:attempted-recon; sid:200003726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-104247.weeblysite.com",nocase; classtype:attempted-recon; sid:200003727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-ban-ebrou.personalbrouact.repl.co",nocase; classtype:attempted-recon; sid:200003728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-blabyswap.com",nocase; classtype:attempted-recon; sid:200003729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-personas.homebankingl.repl.co",nocase; classtype:attempted-recon; sid:200003730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-prev.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homebanking.actualizar0.repl.co",nocase; classtype:attempted-recon; sid:200003732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homebanking.homebg.repl.co",nocase; classtype:attempted-recon; sid:200003733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homebankinggalicia.soportgalicia.repl.co",nocase; classtype:attempted-recon; sid:200003734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homebanklngcajarequipa.garciasinformatica.com.br",nocase; classtype:attempted-recon; sid:200003735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homebgar.galiciahomeb.repl.co",nocase; classtype:attempted-recon; sid:200003736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homebt.myportfolio.com",nocase; classtype:attempted-recon; sid:200003737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homejuhddhdgaliciainfoskushss.galici889.repl.co",nocase; classtype:attempted-recon; sid:200003738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homemade.school",nocase; classtype:attempted-recon; sid:200003739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homeoffice365login.myportfolio.com",nocase; classtype:attempted-recon; sid:200003740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homepageserv18.duckdns.org",nocase; classtype:attempted-recon; sid:200003741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homepersonas.homegalicial.repl.co",nocase; classtype:attempted-recon; sid:200003742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homethebrowuo.repliterus.repl.co",nocase; classtype:attempted-recon; sid:200003743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homsswhimsicallearning.galiciabank1.repl.co",nocase; classtype:attempted-recon; sid:200003744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hopxgroup.com",nocase; classtype:attempted-recon; sid:200003745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"host-amfcu.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"host-amfcu.web.app",nocase; classtype:attempted-recon; sid:200003747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hostnix.net",nocase; classtype:attempted-recon; sid:200003748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hotel-pontos.gr",nocase; classtype:attempted-recon; sid:200003749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hotelxcaretrivieramaya.com",nocase; classtype:attempted-recon; sid:200003750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hotonline.royalwebhosting.net",nocase; classtype:attempted-recon; sid:200003751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hotpinkgrate.55112.repl.co",nocase; classtype:attempted-recon; sid:200003752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hotshoot2022.com",nocase; classtype:attempted-recon; sid:200003753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hounbvc-c7661.web.app",nocase; classtype:attempted-recon; sid:200003754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"house18.info",nocase; classtype:attempted-recon; sid:200003755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"housebase.hercobuly.biz",nocase; classtype:attempted-recon; sid:200003756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"howslife.com.tw",nocase; classtype:attempted-recon; sid:200003757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hpplotters.in",nocase; classtype:attempted-recon; sid:200003758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hprt-4kvuhtyw.webcindario.com",nocase; classtype:attempted-recon; sid:200003759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hrhrt.79253.cn",nocase; classtype:attempted-recon; sid:200003760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hrhrt.kcszyy.cn",nocase; classtype:attempted-recon; sid:200003761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hrxvgn.com",nocase; classtype:attempted-recon; sid:200003762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hsdigital.plc-app.net",nocase; classtype:attempted-recon; sid:200003763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hsjddbbs.shop",nocase; classtype:attempted-recon; sid:200003764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hsjsjaianyai82h.ydns.eu",nocase; classtype:attempted-recon; sid:200003765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hszc168.com",nocase; classtype:attempted-recon; sid:200003766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"htcxv.bokangh.cn",nocase; classtype:attempted-recon; sid:200003767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"htddc.wuzhongyun.cn",nocase; classtype:attempted-recon; sid:200003768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"html-update-okay99.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"html-update-okay99.web.app",nocase; classtype:attempted-recon; sid:200003770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"htrh.ytxzyy.cn",nocase; classtype:attempted-recon; sid:200003771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"httpeugnerally-wixsite-com.filesusr.com",nocase; classtype:attempted-recon; sid:200003772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"htttp-2022-link.duckdns.org",nocase; classtype:attempted-recon; sid:200003773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"huagema20.pages.dev",nocase; classtype:attempted-recon; sid:200003774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"huangxc.com",nocase; classtype:attempted-recon; sid:200003775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"huastecaretto.com",nocase; classtype:attempted-recon; sid:200003776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hubfileshareoffice365.myportfolio.com",nocase; classtype:attempted-recon; sid:200003777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hublifefinancials.com",nocase; classtype:attempted-recon; sid:200003778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hugobosswyprzedaz.pl",nocase; classtype:attempted-recon; sid:200003779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"huijia123.shop",nocase; classtype:attempted-recon; sid:200003780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hulu-com-activate.sitey.me",nocase; classtype:attempted-recon; sid:200003781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hulu-hulu-com-activate.sitey.me",nocase; classtype:attempted-recon; sid:200003782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hulu.sitey.me",nocase; classtype:attempted-recon; sid:200003783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"humongoussubtleconnection.galicianotifi.repl.co",nocase; classtype:attempted-recon; sid:200003784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"humrtftgi-dot-s0lds-mea-2pas.ue.r.appspot.com",nocase; classtype:attempted-recon; sid:200003785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"huntandgo.com",nocase; classtype:attempted-recon; sid:200003786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hunterkaloszeoutlet.com",nocase; classtype:attempted-recon; sid:200003787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hutoknepper.de",nocase; classtype:attempted-recon; sid:200003788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"huuntuajsx.duckdns.org",nocase; classtype:attempted-recon; sid:200003789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"huynguyen2k.github.io",nocase; classtype:attempted-recon; sid:200003790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hvfekilwtz.duckdns.org",nocase; classtype:attempted-recon; sid:200003791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hwfo24295.xyz",nocase; classtype:attempted-recon; sid:200003792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hwwvtnxuhl.duckdns.org",nocase; classtype:attempted-recon; sid:200003793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hyfdcv.lpbmebc.cn",nocase; classtype:attempted-recon; sid:200003794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hyfdcv.xxyvqoo.cn",nocase; classtype:attempted-recon; sid:200003795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hyftg.kvrdtc.cn",nocase; classtype:attempted-recon; sid:200003796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hygcd.0wjkayq.cn",nocase; classtype:attempted-recon; sid:200003797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hyhnktdmjr.duckdns.org",nocase; classtype:attempted-recon; sid:200003798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hyp.ae",nocase; classtype:attempted-recon; sid:200003799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hype-primates-embassy.monkelabs.cf",nocase; classtype:attempted-recon; sid:200003800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hypesquadteam-emailevents.cf",nocase; classtype:attempted-recon; sid:200003801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hypnobirthinggta.com",nocase; classtype:attempted-recon; sid:200003802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hzviqcasna.duckdns.org",nocase; classtype:attempted-recon; sid:200003803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hzxblkgtpk.duckdns.org",nocase; classtype:attempted-recon; sid:200003804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"i-ask332.dga.jp",nocase; classtype:attempted-recon; sid:200003805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"i.violationspage.validationspege.workers.dev",nocase; classtype:attempted-recon; sid:200003806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"i8.ae",nocase; classtype:attempted-recon; sid:200003807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iahnsauoiz.duckdns.org",nocase; classtype:attempted-recon; sid:200003808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iamtlymzfv.duckdns.org",nocase; classtype:attempted-recon; sid:200003809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iaopnxbywg.duckdns.org",nocase; classtype:attempted-recon; sid:200003810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iaxgaepvll.duckdns.org",nocase; classtype:attempted-recon; sid:200003811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ibank.pkpolskisa.com",nocase; classtype:attempted-recon; sid:200003812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iberostarhotelsresorts.com",nocase; classtype:attempted-recon; sid:200003813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ibflmmceev.duckdns.org",nocase; classtype:attempted-recon; sid:200003814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ibhpmbxtqm.duckdns.org",nocase; classtype:attempted-recon; sid:200003815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ibklnkalku.duckdns.org",nocase; classtype:attempted-recon; sid:200003816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ibpm.ru",nocase; classtype:attempted-recon; sid:200003817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ibraibraa170.42web.io",nocase; classtype:attempted-recon; sid:200003818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"icat.tg",nocase; classtype:attempted-recon; sid:200003819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iccu-2fa.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iccu-2fa.web.app",nocase; classtype:attempted-recon; sid:200003821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iccu-a.web.app",nocase; classtype:attempted-recon; sid:200003822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iccu-ie.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iccu-ie.web.app",nocase; classtype:attempted-recon; sid:200003824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ichosenimports.com",nocase; classtype:attempted-recon; sid:200003825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"icosahed.com",nocase; classtype:attempted-recon; sid:200003826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"icscards.nl.team360software.com",nocase; classtype:attempted-recon; sid:200003827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"icsconsultant.net",nocase; classtype:attempted-recon; sid:200003828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"icy-block-93df.edrees368.workers.dev",nocase; classtype:attempted-recon; sid:200003829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"id-000064updatenow.weebly.com",nocase; classtype:attempted-recon; sid:200003830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"id-64300000-updatenow.weebly.com",nocase; classtype:attempted-recon; sid:200003831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"id-optus-verify.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"id-optus-verify.web.app",nocase; classtype:attempted-recon; sid:200003833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"id.auth-app-id.net",nocase; classtype:attempted-recon; sid:200003834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"id27.page.link",nocase; classtype:attempted-recon; sid:200003835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"idobeamolax.com",nocase; classtype:attempted-recon; sid:200003836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"idz-do.pl",nocase; classtype:attempted-recon; sid:200003837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ieluisfelipecenteno.edu.co",nocase; classtype:attempted-recon; sid:200003838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iepsanjosemiguia.edu.pe",nocase; classtype:attempted-recon; sid:200003839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ieuzpeflqa.duckdns.org",nocase; classtype:attempted-recon; sid:200003840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iewojmsykn.duckdns.org",nocase; classtype:attempted-recon; sid:200003841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifibybo.cluster028.hosting.ovh.net",nocase; classtype:attempted-recon; sid:200003842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iframejld.avent-media.fr",nocase; classtype:attempted-recon; sid:200003843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"igotinnovative.com",nocase; classtype:attempted-recon; sid:200003844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"igsoerwldi.duckdns.org",nocase; classtype:attempted-recon; sid:200003845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"igsolthermsolar.blogspot.com",nocase; classtype:attempted-recon; sid:200003846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iicconsulting.com",nocase; classtype:attempted-recon; sid:200003847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iipalereeilri.com",nocase; classtype:attempted-recon; sid:200003848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iiss.edu.pk",nocase; classtype:attempted-recon; sid:200003849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iiuuijjjjb.duckdns.org",nocase; classtype:attempted-recon; sid:200003850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ijedfjiezzdf-b6252c.ingress-comporellon.ewp.live",nocase; classtype:attempted-recon; sid:200003851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ijnqvwt.top",nocase; classtype:attempted-recon; sid:200003852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ikghxwjoth.duckdns.org",nocase; classtype:attempted-recon; sid:200003853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ikjjapepty.duckdns.org",nocase; classtype:attempted-recon; sid:200003854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ikko-pkobp.com",nocase; classtype:attempted-recon; sid:200003855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iko-pkobcp.com",nocase; classtype:attempted-recon; sid:200003856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iko-pkobop.com",nocase; classtype:attempted-recon; sid:200003857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iko-pkobpc.com",nocase; classtype:attempted-recon; sid:200003858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iko-pkopbp.com",nocase; classtype:attempted-recon; sid:200003859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iko-secure.com",nocase; classtype:attempted-recon; sid:200003860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ikujnnnbv.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ikujnnnbv.web.app",nocase; classtype:attempted-recon; sid:200003862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ikyug.njhm0832.cn",nocase; classtype:attempted-recon; sid:200003863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ilzejulcvo.duckdns.org",nocase; classtype:attempted-recon; sid:200003864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imaginativebinarytree.090006.repl.co",nocase; classtype:attempted-recon; sid:200003865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imb.manantialdebendicion.com",nocase; classtype:attempted-recon; sid:200003866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imbibetechnologies.co.in",nocase; classtype:attempted-recon; sid:200003867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imeca.com.ve",nocase; classtype:attempted-recon; sid:200003868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imezscbzmd.duckdns.org",nocase; classtype:attempted-recon; sid:200003869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imicrosoftoffice365.myportfolio.com",nocase; classtype:attempted-recon; sid:200003870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imitoken.club",nocase; classtype:attempted-recon; sid:200003871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"immutablle.xyz",nocase; classtype:attempted-recon; sid:200003872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imobiliaria-cardinali-com-br.blogspot.com",nocase; classtype:attempted-recon; sid:200003873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"importvalidator.org",nocase; classtype:attempted-recon; sid:200003874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"impotsgouv-france.com",nocase; classtype:attempted-recon; sid:200003875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imsyflwafs.duckdns.org",nocase; classtype:attempted-recon; sid:200003876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imtokenmart.com",nocase; classtype:attempted-recon; sid:200003877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"in.uplink.pua-ui.com",nocase; classtype:attempted-recon; sid:200003878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"in4ou567twch.ru",nocase; classtype:attempted-recon; sid:200003879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inchirieri-limuzinebucuresti.ro",nocase; classtype:attempted-recon; sid:200003880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"incoming-fax-document.myportfolio.com",nocase; classtype:attempted-recon; sid:200003881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"incompatiblelineninfo.microsegurity.repl.co",nocase; classtype:attempted-recon; sid:200003882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"indian-battleskins.xyz",nocase; classtype:attempted-recon; sid:200003883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"indianajons.com",nocase; classtype:attempted-recon; sid:200003884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"indigocrowdfunding.com",nocase; classtype:attempted-recon; sid:200003885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"indigoswap.io",nocase; classtype:attempted-recon; sid:200003886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"indmobilelegends.com",nocase; classtype:attempted-recon; sid:200003887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"industrial9802.dayan2021.repl.co",nocase; classtype:attempted-recon; sid:200003888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"industrial9903.dayan2021.repl.co",nocase; classtype:attempted-recon; sid:200003889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inflixty.rf.gd",nocase; classtype:attempted-recon; sid:200003890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"info-assureameli.fr",nocase; classtype:attempted-recon; sid:200003891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"info-client.fr",nocase; classtype:attempted-recon; sid:200003892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"info-cpam.fr",nocase; classtype:attempted-recon; sid:200003893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"info.dnb.no",nocase; classtype:attempted-recon; sid:200003894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"info1226.systeme.io",nocase; classtype:attempted-recon; sid:200003895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"infocarte.fr",nocase; classtype:attempted-recon; sid:200003896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inforbroro.activaciion420.repl.co",nocase; classtype:attempted-recon; sid:200003897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inform-01.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inform-01.web.app",nocase; classtype:attempted-recon; sid:200003899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"informacion.bancogalicia564.repl.co",nocase; classtype:attempted-recon; sid:200003900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"informacioo420.ankeppw.repl.co",nocase; classtype:attempted-recon; sid:200003901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"informations.recovery.confiryourpage.workers.dev",nocase; classtype:attempted-recon; sid:200003902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"informationtaxcase.page.link",nocase; classtype:attempted-recon; sid:200003903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"infos-novobanco.com",nocase; classtype:attempted-recon; sid:200003904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"infowetehc08.dns.army",nocase; classtype:attempted-recon; sid:200003905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ingcompte-be-9093b.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ingreestuyaa1463.hostfree.pw",nocase; classtype:attempted-recon; sid:200003907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ingreestuyaa212s.hostfree.pw",nocase; classtype:attempted-recon; sid:200003908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ingreestuyaa2213.hostfree.pw",nocase; classtype:attempted-recon; sid:200003909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ingreestuyphet3654.0hi.me",nocase; classtype:attempted-recon; sid:200003910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inicio.brouws.repl.co",nocase; classtype:attempted-recon; sid:200003911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inmobiliariaalfa.cl",nocase; classtype:attempted-recon; sid:200003912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"innate.es",nocase; classtype:attempted-recon; sid:200003913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"innovation-evotik.web.app",nocase; classtype:attempted-recon; sid:200003914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inoabeauty.com",nocase; classtype:attempted-recon; sid:200003915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inpost-goods.9078432.xyz",nocase; classtype:attempted-recon; sid:200003916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inpost-pl-my-id2g3ys.tron-x.top",nocase; classtype:attempted-recon; sid:200003917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inpost-pl-myid271xs.huangyy.xyz",nocase; classtype:attempted-recon; sid:200003918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inpost-pl-zai.accept8145.me",nocase; classtype:attempted-recon; sid:200003919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inpost-rghl.2584902.me",nocase; classtype:attempted-recon; sid:200003920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inpost.id103149.cfd",nocase; classtype:attempted-recon; sid:200003921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inps-ep.com",nocase; classtype:attempted-recon; sid:200003922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"insetti.com.mx",nocase; classtype:attempted-recon; sid:200003923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inshredirects.tk",nocase; classtype:attempted-recon; sid:200003924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inspiring-01923912388123-apsdwoaacadx.netlify.app",nocase; classtype:attempted-recon; sid:200003925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"instagram.asiafinance.in",nocase; classtype:attempted-recon; sid:200003926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"instintosuperior.com.br",nocase; classtype:attempted-recon; sid:200003927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"insurancetrader.gr",nocase; classtype:attempted-recon; sid:200003928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"int3eractivebrokers.com",nocase; classtype:attempted-recon; sid:200003929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"integratenftpads.com",nocase; classtype:attempted-recon; sid:200003930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"intelligence.pw",nocase; classtype:attempted-recon; sid:200003931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interactive829a.liveblog365.com",nocase; classtype:attempted-recon; sid:200003932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interactivebrokers.co.za",nocase; classtype:attempted-recon; sid:200003933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interactivebrokrers.com",nocase; classtype:attempted-recon; sid:200003934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interactivebrolkers.com",nocase; classtype:attempted-recon; sid:200003935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interadtivebrokers.com",nocase; classtype:attempted-recon; sid:200003936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interbanca00.repl.co",nocase; classtype:attempted-recon; sid:200003937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interbancagalicia.bancaonlineinf.repl.co",nocase; classtype:attempted-recon; sid:200003938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interbank-ingresa.web.app",nocase; classtype:attempted-recon; sid:200003939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interbank-personas.web.app",nocase; classtype:attempted-recon; sid:200003940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interbank-peru.web.app",nocase; classtype:attempted-recon; sid:200003941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interbankappprestamos.galodooeste.com.br",nocase; classtype:attempted-recon; sid:200003942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interbankempresahomeweb.gemsaweb.com",nocase; classtype:attempted-recon; sid:200003943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"international-c.hostfree.pw",nocase; classtype:attempted-recon; sid:200003944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"internetprofitscoach.com",nocase; classtype:attempted-recon; sid:200003945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"internetservicetech.com",nocase; classtype:attempted-recon; sid:200003946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interspar.at",nocase; classtype:attempted-recon; sid:200003947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"intlrdwardpp.xyz",nocase; classtype:attempted-recon; sid:200003948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"intrepidusa-docs.ga",nocase; classtype:attempted-recon; sid:200003949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inv-file351830.web.app",nocase; classtype:attempted-recon; sid:200003950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"invisiblefriendsnft.in",nocase; classtype:attempted-recon; sid:200003951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"invoice-norwestengineering.myportfolio.com",nocase; classtype:attempted-recon; sid:200003952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"invoice-production.chat-verify.workers.dev",nocase; classtype:attempted-recon; sid:200003953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"invoiceoffice365microsoftwvjzgqyqaqapni05ymqwltc5yjuznuqouvu1i5.myportfolio.com",nocase; classtype:attempted-recon; sid:200003954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"invoiceoffice365microsoftxghjdshgjbgbfjxbbhxhxbhbxhjnxgjxhvxxx.myportfolio.com",nocase; classtype:attempted-recon; sid:200003955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"invworld.live",nocase; classtype:attempted-recon; sid:200003956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inzizi.com",nocase; classtype:attempted-recon; sid:200003957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ionos-mein.webmail.de.flick-fix.de",nocase; classtype:attempted-recon; sid:200003958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ionos.com.ng",nocase; classtype:attempted-recon; sid:200003959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ionos.zimapp.workers.dev",nocase; classtype:attempted-recon; sid:200003960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ionosionos3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ionosionos3.web.app",nocase; classtype:attempted-recon; sid:200003962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ionroyazz.hyperphp.com",nocase; classtype:attempted-recon; sid:200003963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ip-160-153-249-63.ip.secureserver.net",nocase; classtype:attempted-recon; sid:200003964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipixacademy.com",nocase; classtype:attempted-recon; sid:200003965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iplogger.info",nocase; classtype:attempted-recon; sid:200003966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipvpn055172.netvigator.com",nocase; classtype:attempted-recon; sid:200003967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iqrdmylqqi.duckdns.org",nocase; classtype:attempted-recon; sid:200003968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iratia.top",nocase; classtype:attempted-recon; sid:200003969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iraudzsq.hyperphp.com",nocase; classtype:attempted-recon; sid:200003970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irdercorreosservisco-b8aedc.ingress-daribow.ewp.live",nocase; classtype:attempted-recon; sid:200003971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irdqartpyl.duckdns.org",nocase; classtype:attempted-recon; sid:200003972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irdwvramns.duckdns.org",nocase; classtype:attempted-recon; sid:200003973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irelandsissuesmagazine.com",nocase; classtype:attempted-recon; sid:200003974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irs-claim-onlinetax.com",nocase; classtype:attempted-recon; sid:200003975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irs-homefinancialtaxs.americanunfinished.com",nocase; classtype:attempted-recon; sid:200003976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irs-manage-financial.duckdns.org",nocase; classtype:attempted-recon; sid:200003977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irs-taxad.com",nocase; classtype:attempted-recon; sid:200003978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irsgov.myportfolio.com",nocase; classtype:attempted-recon; sid:200003979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irsgovca.myportfolio.com",nocase; classtype:attempted-recon; sid:200003980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irshome-manage-financialtax.americanunfinished.com",nocase; classtype:attempted-recon; sid:200003981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irspay.2.vu",nocase; classtype:attempted-recon; sid:200003982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irsprofile-taxmanage.com",nocase; classtype:attempted-recon; sid:200003983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irstaxlaw.net",nocase; classtype:attempted-recon; sid:200003984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irwwnzizfx.duckdns.org",nocase; classtype:attempted-recon; sid:200003985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"isaacanicama.pe",nocase; classtype:attempted-recon; sid:200003986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"isdmastrazeneca.com",nocase; classtype:attempted-recon; sid:200003987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ishr.cm",nocase; classtype:attempted-recon; sid:200003988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"isxykfokg84r.martincaldeyro.com",nocase; classtype:attempted-recon; sid:200003989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"it-europe564598-com.filesusr.com",nocase; classtype:attempted-recon; sid:200003990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itaseguridsdh.000webhostapp.com",nocase; classtype:attempted-recon; sid:200003991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itau.conectcar.com",nocase; classtype:attempted-recon; sid:200003992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itaucard-bank.com",nocase; classtype:attempted-recon; sid:200003993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itauseguranca.com",nocase; classtype:attempted-recon; sid:200003994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itbcbuffalonation.org",nocase; classtype:attempted-recon; sid:200003995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itdounmowf.duckdns.org",nocase; classtype:attempted-recon; sid:200003996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itnxacmasl.duckdns.org",nocase; classtype:attempted-recon; sid:200003997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itoscop.com",nocase; classtype:attempted-recon; sid:200003998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itsmdshahin.github.io",nocase; classtype:attempted-recon; sid:200003999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itsweblook.com",nocase; classtype:attempted-recon; sid:200004000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ivabcqzmak.duckdns.org",nocase; classtype:attempted-recon; sid:200004001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iveialkpsx.duckdns.org",nocase; classtype:attempted-recon; sid:200004002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ivfcentreinindia.com",nocase; classtype:attempted-recon; sid:200004003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ivhwbxmces.duckdns.org",nocase; classtype:attempted-recon; sid:200004004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ivkzasgkdu.duckdns.org",nocase; classtype:attempted-recon; sid:200004005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ixjdpqjtqc.duckdns.org",nocase; classtype:attempted-recon; sid:200004006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iytvivmfdk.duckdns.org",nocase; classtype:attempted-recon; sid:200004007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"izggeliaaj.duckdns.org",nocase; classtype:attempted-recon; sid:200004008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"izira.net",nocase; classtype:attempted-recon; sid:200004009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"izkxwwvhgt.duckdns.org",nocase; classtype:attempted-recon; sid:200004010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"izqvtcmmol.duckdns.org",nocase; classtype:attempted-recon; sid:200004011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"izyinktattoo.de",nocase; classtype:attempted-recon; sid:200004012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"j24mo.app.link",nocase; classtype:attempted-recon; sid:200004013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jaccs-co.tdycutq.cn",nocase; classtype:attempted-recon; sid:200004014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jaccs-jp.ylberhg.cn",nocase; classtype:attempted-recon; sid:200004015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jackpotsource.com",nocase; classtype:attempted-recon; sid:200004016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jacksoncountytalenthub.com",nocase; classtype:attempted-recon; sid:200004017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jacobliston.com",nocase; classtype:attempted-recon; sid:200004018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jaiqhuhpnx.duckdns.org",nocase; classtype:attempted-recon; sid:200004019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jajaja2121.byethost31.com",nocase; classtype:attempted-recon; sid:200004020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jakdjakadjkax8.ydns.eu",nocase; classtype:attempted-recon; sid:200004021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jam-023d.gitlab.io",nocase; classtype:attempted-recon; sid:200004022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"james8.aidaform.com",nocase; classtype:attempted-recon; sid:200004023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jammonia.com",nocase; classtype:attempted-recon; sid:200004024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"janex.ir",nocase; classtype:attempted-recon; sid:200004025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jaqidvmuxp.duckdns.org",nocase; classtype:attempted-recon; sid:200004026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jasa-antar-jemput-laundry-murah-435345345.web.id",nocase; classtype:attempted-recon; sid:200004027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jasa-antar-jemput-laundry-sukses.web.id",nocase; classtype:attempted-recon; sid:200004028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jasa-antar-luar-kota-ade-12500544.web.id",nocase; classtype:attempted-recon; sid:200004029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jasa-antar-luar-kota-ade-12533012.biz.id",nocase; classtype:attempted-recon; sid:200004030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jasa-antar-luar-kota-ade-1256.cf",nocase; classtype:attempted-recon; sid:200004031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jasa-antar-luar-kota-ade-1256546456.cf",nocase; classtype:attempted-recon; sid:200004032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jasa-antar-luar-kota-ade-12582333.info",nocase; classtype:attempted-recon; sid:200004033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jasa-bg-kakon-keman-aj-45676748767.web.id",nocase; classtype:attempted-recon; sid:200004034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jayashreefoundation.com",nocase; classtype:attempted-recon; sid:200004035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jbgkkxkzty.duckdns.org",nocase; classtype:attempted-recon; sid:200004036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jbvfd.obiij5b.cn",nocase; classtype:attempted-recon; sid:200004037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jccixoovbh.duckdns.org",nocase; classtype:attempted-recon; sid:200004038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jcinsulfilm.com.br",nocase; classtype:attempted-recon; sid:200004039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jckfirs.punctulcentral.org",nocase; classtype:attempted-recon; sid:200004040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jdgcggfhfhfhfnhfn.weeblysite.com",nocase; classtype:attempted-recon; sid:200004041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jdkgdsdlcj.duckdns.org",nocase; classtype:attempted-recon; sid:200004042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jefsfufjxy.duckdns.org",nocase; classtype:attempted-recon; sid:200004043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jehykdhlsi.duckdns.org",nocase; classtype:attempted-recon; sid:200004044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jelink.id",nocase; classtype:attempted-recon; sid:200004045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jennipricephotography.com",nocase; classtype:attempted-recon; sid:200004046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jenny-fcc.com",nocase; classtype:attempted-recon; sid:200004047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jetser-electrical-supply.business.site",nocase; classtype:attempted-recon; sid:200004048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jett.gator.site",nocase; classtype:attempted-recon; sid:200004049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfcvf.ukpgnat.cn",nocase; classtype:attempted-recon; sid:200004050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfcvfd.1dfb1b3.cn",nocase; classtype:attempted-recon; sid:200004051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgbv.bvjlip.cn",nocase; classtype:attempted-recon; sid:200004052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgbv.rfahyz.cn",nocase; classtype:attempted-recon; sid:200004053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgbvc.3m5ztv2.cn",nocase; classtype:attempted-recon; sid:200004054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgcv.dsjitgs.cn",nocase; classtype:attempted-recon; sid:200004055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgcv.hfyuuff.cn",nocase; classtype:attempted-recon; sid:200004056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgcv.hgsb01.cn",nocase; classtype:attempted-recon; sid:200004057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgcv.iwetot.cn",nocase; classtype:attempted-recon; sid:200004058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgcv.q6yql86.cn",nocase; classtype:attempted-recon; sid:200004059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgcv.tet1b85.cn",nocase; classtype:attempted-recon; sid:200004060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgcv.umfibae.cn",nocase; classtype:attempted-recon; sid:200004061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgcv.wzpnqph.cn",nocase; classtype:attempted-recon; sid:200004062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgcv.ybkkjtf.cn",nocase; classtype:attempted-recon; sid:200004063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgcvv.mupsajw.cn",nocase; classtype:attempted-recon; sid:200004064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgcx.ufrjnly.cn",nocase; classtype:attempted-recon; sid:200004065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghb.djhuuoj.cn",nocase; classtype:attempted-recon; sid:200004066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghcv.faxpuj.cn",nocase; classtype:attempted-recon; sid:200004067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghcv.mtcucnq.cn",nocase; classtype:attempted-recon; sid:200004068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghcv.pyfstsp.cn",nocase; classtype:attempted-recon; sid:200004069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghv.nv37b7i.cn",nocase; classtype:attempted-recon; sid:200004070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghv.pbh9wnm.cn",nocase; classtype:attempted-recon; sid:200004071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghv.thgywhy.cn",nocase; classtype:attempted-recon; sid:200004072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghv.u49v9sv.cn",nocase; classtype:attempted-recon; sid:200004073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghvb.7cedj0q.cn",nocase; classtype:attempted-recon; sid:200004074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghvv.gi9fl.cn",nocase; classtype:attempted-recon; sid:200004075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghyv.mwaeidb.cn",nocase; classtype:attempted-recon; sid:200004076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgsd.rxd0k4b.cn",nocase; classtype:attempted-recon; sid:200004077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgvbc.vycwlag.cn",nocase; classtype:attempted-recon; sid:200004078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgvc.82aklen.cn",nocase; classtype:attempted-recon; sid:200004079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgvc.yz0v18f.cn",nocase; classtype:attempted-recon; sid:200004080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jflkp.csb.app",nocase; classtype:attempted-recon; sid:200004081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfqfovs.cf",nocase; classtype:attempted-recon; sid:200004082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgfcv.gsvjnz.cn",nocase; classtype:attempted-recon; sid:200004083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgfcv.qfxoefb.cn",nocase; classtype:attempted-recon; sid:200004084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgfcv.ukyaykm.cn",nocase; classtype:attempted-recon; sid:200004085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgfcv.x14u3j6.cn",nocase; classtype:attempted-recon; sid:200004086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgfcv.xo19cl.cn",nocase; classtype:attempted-recon; sid:200004087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgfcv.xsyrrm.cn",nocase; classtype:attempted-recon; sid:200004088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgfcv.ypwg624.cn",nocase; classtype:attempted-recon; sid:200004089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgfcv.yspxjik.cn",nocase; classtype:attempted-recon; sid:200004090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgfcvf.klauqxr.cn",nocase; classtype:attempted-recon; sid:200004091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgfvc.kbcxeyq.cn",nocase; classtype:attempted-recon; sid:200004092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgfvc.yna2isn.cn",nocase; classtype:attempted-recon; sid:200004093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgfvcd.dovsj24.cn",nocase; classtype:attempted-recon; sid:200004094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgfvcf.irwrra.cn",nocase; classtype:attempted-recon; sid:200004095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgfxc.kxcfpyi.cn",nocase; classtype:attempted-recon; sid:200004096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jghbv.bgvhllh.cn",nocase; classtype:attempted-recon; sid:200004097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jghcv.ijlj.cn",nocase; classtype:attempted-recon; sid:200004098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jghcv.iurr.cn",nocase; classtype:attempted-recon; sid:200004099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jghcv.mxycake.cn",nocase; classtype:attempted-recon; sid:200004100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jghcvd.ivfodga.cn",nocase; classtype:attempted-recon; sid:200004101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jghcvf.qhudoqi.cn",nocase; classtype:attempted-recon; sid:200004102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jghfb.xzpslnr.cn",nocase; classtype:attempted-recon; sid:200004103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jghjasfxjahxgkvy.hostfree.pw",nocase; classtype:attempted-recon; sid:200004104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jghvc.vghdnwv.cn",nocase; classtype:attempted-recon; sid:200004105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhahnews.com",nocase; classtype:attempted-recon; sid:200004106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhakdjdjx92.ydns.eu",nocase; classtype:attempted-recon; sid:200004107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhfgb.n93a78q.cn",nocase; classtype:attempted-recon; sid:200004108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhfgv.9xhno6w.cn",nocase; classtype:attempted-recon; sid:200004109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhfgv.sqfxxqk.cn",nocase; classtype:attempted-recon; sid:200004110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhgb.kpxpig.cn",nocase; classtype:attempted-recon; sid:200004111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhgbv.cquotxv.cn",nocase; classtype:attempted-recon; sid:200004112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhgbv.krnxog.cn",nocase; classtype:attempted-recon; sid:200004113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhgbv.smalllucky.cn",nocase; classtype:attempted-recon; sid:200004114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhgrtyoliutry.liveblog365.com",nocase; classtype:attempted-recon; sid:200004115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhgvb.hiqoyq.cn",nocase; classtype:attempted-recon; sid:200004116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhgvc.7dqh43g.cn",nocase; classtype:attempted-recon; sid:200004117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhhh.fuwatongzhuang.cn",nocase; classtype:attempted-recon; sid:200004118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhmjthxdni.duckdns.org",nocase; classtype:attempted-recon; sid:200004119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhsvalbvs.hostfree.pw",nocase; classtype:attempted-recon; sid:200004120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhvcf.hhjsaq.cn",nocase; classtype:attempted-recon; sid:200004121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhvcg.lltetn.cn",nocase; classtype:attempted-recon; sid:200004122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jii.li",nocase; classtype:attempted-recon; sid:200004123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jio-giga-fiber-scale-repair-service.business.site",nocase; classtype:attempted-recon; sid:200004124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jio.network",nocase; classtype:attempted-recon; sid:200004125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jiofiberstore.com",nocase; classtype:attempted-recon; sid:200004126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jiostore.digitalhubstore.in",nocase; classtype:attempted-recon; sid:200004127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jipdktstvm.duckdns.org",nocase; classtype:attempted-recon; sid:200004128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jkfghc.yjkrzqy.cn",nocase; classtype:attempted-recon; sid:200004129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jkgfhrhvh.hostfree.pw",nocase; classtype:attempted-recon; sid:200004130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jkghy.xfbp589.cn",nocase; classtype:attempted-recon; sid:200004131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jkmghv.gnowite.cn",nocase; classtype:attempted-recon; sid:200004132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jkolawnservice.com",nocase; classtype:attempted-recon; sid:200004133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jkzdn.weeblysite.com",nocase; classtype:attempted-recon; sid:200004134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jldouenqhw.duckdns.org",nocase; classtype:attempted-recon; sid:200004135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jmhgb.pinghesb.cn",nocase; classtype:attempted-recon; sid:200004136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jmro5-3qaaa-aaaad-qdqyq-cai.ic.fleek.co",nocase; classtype:attempted-recon; sid:200004137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jnbb.soutaoye.cn",nocase; classtype:attempted-recon; sid:200004138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"joannschreiber.com",nocase; classtype:attempted-recon; sid:200004139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jobhubindia.co.in",nocase; classtype:attempted-recon; sid:200004140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"joecamera.net",nocase; classtype:attempted-recon; sid:200004141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"johndconry.com",nocase; classtype:attempted-recon; sid:200004142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"joingrupwaxxx18.duckdns.org",nocase; classtype:attempted-recon; sid:200004143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jolly-sabaa.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200004144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jow-japan.or.jp",nocase; classtype:attempted-recon; sid:200004145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jpmc-unification-uat.eventfarm.com",nocase; classtype:attempted-recon; sid:200004146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jqaytyoyda.duckdns.org",nocase; classtype:attempted-recon; sid:200004147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jrest-card.tqikoed.cn",nocase; classtype:attempted-recon; sid:200004148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jrest-co.ocgxivd.cn",nocase; classtype:attempted-recon; sid:200004149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jrest-jp.tgfgvfw.cn",nocase; classtype:attempted-recon; sid:200004150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"juanesteba.xiaopangkj.space",nocase; classtype:attempted-recon; sid:200004151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jufghb.ekv6deq.cn",nocase; classtype:attempted-recon; sid:200004152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jufghv.hr24zi.cn",nocase; classtype:attempted-recon; sid:200004153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"juhfg.ez3o7o.cn",nocase; classtype:attempted-recon; sid:200004154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"juhfv.ehz5oli.cn",nocase; classtype:attempted-recon; sid:200004155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"juialaq1819.liveblog365.com",nocase; classtype:attempted-recon; sid:200004156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"juliegr.com",nocase; classtype:attempted-recon; sid:200004157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jumbomortifiedformats.898967.repl.co",nocase; classtype:attempted-recon; sid:200004158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"june.document-project-list.workers.dev",nocase; classtype:attempted-recon; sid:200004159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"junejohnson.gq",nocase; classtype:attempted-recon; sid:200004160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"juridaois892nba.liveblog365.com",nocase; classtype:attempted-recon; sid:200004161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"juridic-dividers.000webhostapp.com",nocase; classtype:attempted-recon; sid:200004162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jurnalistik.uinjkt.ac.id",nocase; classtype:attempted-recon; sid:200004163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"justlighttechnology.justlight.net",nocase; classtype:attempted-recon; sid:200004164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"justsayingbro.com",nocase; classtype:attempted-recon; sid:200004165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"juyfg.xeiawau.cn",nocase; classtype:attempted-recon; sid:200004166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jvlpfcxtkg.duckdns.org",nocase; classtype:attempted-recon; sid:200004167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jwinntlvlo.duckdns.org",nocase; classtype:attempted-recon; sid:200004168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jxcxcjxvcjcvjcv-invoice.devnotes.co.in",nocase; classtype:attempted-recon; sid:200004169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jyeue43rm95p.clickfunnels.com",nocase; classtype:attempted-recon; sid:200004170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jylubrvnms.duckdns.org",nocase; classtype:attempted-recon; sid:200004171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jyvfg.weixin03.cn",nocase; classtype:attempted-recon; sid:200004172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jz2bab.webwave.dev",nocase; classtype:attempted-recon; sid:200004173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"k.axsct.xyz",nocase; classtype:attempted-recon; sid:200004174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"k3ja6d.webwave.dev",nocase; classtype:attempted-recon; sid:200004175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"k7dj3-ziaaa-aaaad-qdiia-cai.ic.fleek.co",nocase; classtype:attempted-recon; sid:200004176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kaamwalibais.co.in",nocase; classtype:attempted-recon; sid:200004177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kafkasariotel.com",nocase; classtype:attempted-recon; sid:200004178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kaharaerad.web.app",nocase; classtype:attempted-recon; sid:200004179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"karafuuru.xyz",nocase; classtype:attempted-recon; sid:200004180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kardiologiebadkissingen.clickfunnels.com",nocase; classtype:attempted-recon; sid:200004181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"karendocreviews.com",nocase; classtype:attempted-recon; sid:200004182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kargonova.com",nocase; classtype:attempted-recon; sid:200004183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"karllagerfeldshop.com",nocase; classtype:attempted-recon; sid:200004184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"karllagfr.com",nocase; classtype:attempted-recon; sid:200004185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kartaltepespor.com",nocase; classtype:attempted-recon; sid:200004186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kasba.in",nocase; classtype:attempted-recon; sid:200004187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kasutadon.com",nocase; classtype:attempted-recon; sid:200004188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"katabitc.go.ug",nocase; classtype:attempted-recon; sid:200004189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"katana-dex.com",nocase; classtype:attempted-recon; sid:200004190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kazumi-everyu.com",nocase; classtype:attempted-recon; sid:200004191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kbaredesigns.com",nocase; classtype:attempted-recon; sid:200004192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kbvfd.zq2ex1k.cn",nocase; classtype:attempted-recon; sid:200004193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kcbieogwou.duckdns.org",nocase; classtype:attempted-recon; sid:200004194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kcpwr.com",nocase; classtype:attempted-recon; sid:200004195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kcxqagwgxt.duckdns.org",nocase; classtype:attempted-recon; sid:200004196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kdbdycgmuk.duckdns.org",nocase; classtype:attempted-recon; sid:200004197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kdlscaffolding.co.uk",nocase; classtype:attempted-recon; sid:200004198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keadaancus.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200004199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kecc.com",nocase; classtype:attempted-recon; sid:200004200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kecmanijada.com",nocase; classtype:attempted-recon; sid:200004201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keep-passw0rd-supp0rt20211129-0106.supp0rtaaqkadq2zgnizte3ltbly2etnge5yi05ntm3lty2yjcwyzywzdjhmwa.workers.dev",nocase; classtype:attempted-recon; sid:200004202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kek-technik.com",nocase; classtype:attempted-recon; sid:200004203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kelayakanadve1000032155421.pw",nocase; classtype:attempted-recon; sid:200004204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kemlidarti.flazio.com",nocase; classtype:attempted-recon; sid:200004205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kenpong.com",nocase; classtype:attempted-recon; sid:200004206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kernplus.com",nocase; classtype:attempted-recon; sid:200004207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keybolivia.com",nocase; classtype:attempted-recon; sid:200004208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kfflaetncv.duckdns.org",nocase; classtype:attempted-recon; sid:200004209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kfxqbmqmmc.duckdns.org",nocase; classtype:attempted-recon; sid:200004210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kgbvfcx.lpitlsb.cn",nocase; classtype:attempted-recon; sid:200004211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghcv.nidnmcg.cn",nocase; classtype:attempted-recon; sid:200004212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghv.jugdmmg.cn",nocase; classtype:attempted-recon; sid:200004213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghvb.jhvjfj3.cn",nocase; classtype:attempted-recon; sid:200004214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghvb.puhezlb.cn",nocase; classtype:attempted-recon; sid:200004215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghvc.ptbopwq.cn",nocase; classtype:attempted-recon; sid:200004216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghyb.izejubaw.cn",nocase; classtype:attempted-recon; sid:200004217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kgpqmzlvqv.duckdns.org",nocase; classtype:attempted-recon; sid:200004218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kgtjattudf.duckdns.org",nocase; classtype:attempted-recon; sid:200004219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khafhkxadiui92.ydns.eu",nocase; classtype:attempted-recon; sid:200004220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khalidouhdane.com",nocase; classtype:attempted-recon; sid:200004221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khankhokhar.ca",nocase; classtype:attempted-recon; sid:200004222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khdgdgdgdgd.weeblysite.com",nocase; classtype:attempted-recon; sid:200004223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khgbv.qfitt15.cn",nocase; classtype:attempted-recon; sid:200004224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khgbv.wgviqz.cn",nocase; classtype:attempted-recon; sid:200004225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khgsx.w0iiggm.cn",nocase; classtype:attempted-recon; sid:200004226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khjbv.ukeuhnd.cn",nocase; classtype:attempted-recon; sid:200004227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khjbv.wox6i4e.cn",nocase; classtype:attempted-recon; sid:200004228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khrfgblbzv.duckdns.org",nocase; classtype:attempted-recon; sid:200004229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kidzeepune.com",nocase; classtype:attempted-recon; sid:200004230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kil.pages.dev",nocase; classtype:attempted-recon; sid:200004231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kimznxbcv.webnode.nl",nocase; classtype:attempted-recon; sid:200004232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kinal-persa.herokuapp.com",nocase; classtype:attempted-recon; sid:200004233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kingfaisalprize.org",nocase; classtype:attempted-recon; sid:200004234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kisiyeozelkartvizit.com",nocase; classtype:attempted-recon; sid:200004235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kissapps.io",nocase; classtype:attempted-recon; sid:200004236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kissmyball.com",nocase; classtype:attempted-recon; sid:200004237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kithocivilengineering.com",nocase; classtype:attempted-recon; sid:200004238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kiwutisy.cyon.site",nocase; classtype:attempted-recon; sid:200004239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjghb.hkj4st.cn",nocase; classtype:attempted-recon; sid:200004240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjghb.i4ficcr.cn",nocase; classtype:attempted-recon; sid:200004241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjghb.j1rbydo.cn",nocase; classtype:attempted-recon; sid:200004242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjghb.llenaj.cn",nocase; classtype:attempted-recon; sid:200004243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjghb.to8hx.cn",nocase; classtype:attempted-recon; sid:200004244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjghb.udvmsf.cn",nocase; classtype:attempted-recon; sid:200004245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjghv.2rzdtwl.cn",nocase; classtype:attempted-recon; sid:200004246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjghv.a9lutw1.cn",nocase; classtype:attempted-recon; sid:200004247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjghv.iwvz2k3.cn",nocase; classtype:attempted-recon; sid:200004248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjghyb.zxgecqw.cn",nocase; classtype:attempted-recon; sid:200004249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjgvc.sm817th.cn",nocase; classtype:attempted-recon; sid:200004250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjgyh.wgvejck.cn",nocase; classtype:attempted-recon; sid:200004251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjgyhc.ebtdesp.cn",nocase; classtype:attempted-recon; sid:200004252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjhb.styspt.cn",nocase; classtype:attempted-recon; sid:200004253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjhbv.cbdikwc.cn",nocase; classtype:attempted-recon; sid:200004254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjhbvg.shgjjjye.cn",nocase; classtype:attempted-recon; sid:200004255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjhcv.hyow0ef.cn",nocase; classtype:attempted-recon; sid:200004256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjhfg.4shfsxm.cn",nocase; classtype:attempted-recon; sid:200004257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjhfg.yjcdyt.cn",nocase; classtype:attempted-recon; sid:200004258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjhgb.xuuneek.cn",nocase; classtype:attempted-recon; sid:200004259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjhgc.213vaj.cn",nocase; classtype:attempted-recon; sid:200004260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjiygb.o4tzlc.cn",nocase; classtype:attempted-recon; sid:200004261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjmjuribyk.duckdns.org",nocase; classtype:attempted-recon; sid:200004262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjyghc.b8ryqx0.cn",nocase; classtype:attempted-recon; sid:200004263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kkqddwdtuk.duckdns.org",nocase; classtype:attempted-recon; sid:200004264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"klaimchipgratis.com",nocase; classtype:attempted-recon; sid:200004265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"klauslindner.com",nocase; classtype:attempted-recon; sid:200004266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kliubv.tvkrehd.cn",nocase; classtype:attempted-recon; sid:200004267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kljfdtstrlnnv.hostfree.pw",nocase; classtype:attempted-recon; sid:200004268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kljhfg.s90kp51.cn",nocase; classtype:attempted-recon; sid:200004269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kllabzvals.duckdns.org",nocase; classtype:attempted-recon; sid:200004270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"klockorochsmycken.se",nocase; classtype:attempted-recon; sid:200004271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"klugingcit.pl",nocase; classtype:attempted-recon; sid:200004272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kmct.edu.in",nocase; classtype:attempted-recon; sid:200004273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kmctayurvedacollege.org",nocase; classtype:attempted-recon; sid:200004274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kmkhcb.net",nocase; classtype:attempted-recon; sid:200004275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"knbgv.ituqfhz.cn",nocase; classtype:attempted-recon; sid:200004276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"know-paths.com",nocase; classtype:attempted-recon; sid:200004277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"koazxojrpf.duckdns.org",nocase; classtype:attempted-recon; sid:200004278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kobe-denki.co.jp",nocase; classtype:attempted-recon; sid:200004279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kodencherycollege.ac.in",nocase; classtype:attempted-recon; sid:200004280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kodera.jp",nocase; classtype:attempted-recon; sid:200004281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"koerich-c-empresarial.com",nocase; classtype:attempted-recon; sid:200004282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kolachristwealth.com",nocase; classtype:attempted-recon; sid:200004283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kone-ali123-mon-site-web-cheetah-5.cheetah.builderall.com",nocase; classtype:attempted-recon; sid:200004284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kontouberwachung.com",nocase; classtype:attempted-recon; sid:200004285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"koteng.odoo.com",nocase; classtype:attempted-recon; sid:200004286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kpvqeaiwmp.duckdns.org",nocase; classtype:attempted-recon; sid:200004287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kqysefmiik.duckdns.org",nocase; classtype:attempted-recon; sid:200004288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kr-bithumb.web.app",nocase; classtype:attempted-recon; sid:200004289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kraiogy-skeaunn-cheantly.yolasite.com",nocase; classtype:attempted-recon; sid:200004290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kreisssparkasse-koeln.com",nocase; classtype:attempted-recon; sid:200004291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"krupije.com",nocase; classtype:attempted-recon; sid:200004292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ks-8482-ghyt.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ks-8482-ghyt.web.app",nocase; classtype:attempted-recon; sid:200004294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ks-fcu.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ks-fcu.web.app",nocase; classtype:attempted-recon; sid:200004296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ksepqbcbqo.duckdns.org",nocase; classtype:attempted-recon; sid:200004297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ksk-stades.com",nocase; classtype:attempted-recon; sid:200004298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ksk-stades.net",nocase; classtype:attempted-recon; sid:200004299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ksobw-bank.myddns.me",nocase; classtype:attempted-recon; sid:200004300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kty-theshared-uby.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kty-theshared-uby.web.app",nocase; classtype:attempted-recon; sid:200004302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kuchkuchnights.com",nocase; classtype:attempted-recon; sid:200004303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kucoin-auth.web.app",nocase; classtype:attempted-recon; sid:200004304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kucolnmyapis.com",nocase; classtype:attempted-recon; sid:200004305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kufdv.uzcpuxo.cn",nocase; classtype:attempted-recon; sid:200004306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kughbv.meylpfu.cn",nocase; classtype:attempted-recon; sid:200004307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kulgn.weblium.site",nocase; classtype:attempted-recon; sid:200004308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kumkumbhagya.su",nocase; classtype:attempted-recon; sid:200004309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kundenservice-okayupdate2022.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kundenservice-okayupdate2022.web.app",nocase; classtype:attempted-recon; sid:200004311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kvaewuhwxl.duckdns.org",nocase; classtype:attempted-recon; sid:200004312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kwarransragen.sragen.pramukajateng.or.id",nocase; classtype:attempted-recon; sid:200004313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kwbmyxlsbn.duckdns.org",nocase; classtype:attempted-recon; sid:200004314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kwh3ba6dy7.9xc7zyurk2.waitforthetruck.com",nocase; classtype:attempted-recon; sid:200004315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kwxrsoknjz.duckdns.org",nocase; classtype:attempted-recon; sid:200004316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kxskivfwjv.duckdns.org",nocase; classtype:attempted-recon; sid:200004317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kyleosburn.com",nocase; classtype:attempted-recon; sid:200004318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kyuhbv.lqoity5.cn",nocase; classtype:attempted-recon; sid:200004319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l0g0n-1654546-ve.hostfree.pw",nocase; classtype:attempted-recon; sid:200004320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"labohemstore.com.br",nocase; classtype:attempted-recon; sid:200004321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lafise.co",nocase; classtype:attempted-recon; sid:200004322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"laiserhillacademy.com",nocase; classtype:attempted-recon; sid:200004323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lakshikagpstracker.com",nocase; classtype:attempted-recon; sid:200004324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lambdaweb.info",nocase; classtype:attempted-recon; sid:200004325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"landcredi.com",nocase; classtype:attempted-recon; sid:200004326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"landhouseshome.com.au",nocase; classtype:attempted-recon; sid:200004327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"larkuvoydu.temp.swtest.ru",nocase; classtype:attempted-recon; sid:200004328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lasecuriterduserviceregionaleca.contactinbio.com",nocase; classtype:attempted-recon; sid:200004329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lasyaja.github.io",nocase; classtype:attempted-recon; sid:200004330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"late-cloud-9e1b.payment-doc.workers.dev",nocase; classtype:attempted-recon; sid:200004331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"late-hill-6d97.microonedrivelive.workers.dev",nocase; classtype:attempted-recon; sid:200004332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"late-rice-0fc8.regan21.workers.dev",nocase; classtype:attempted-recon; sid:200004333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"late-sun-545c.cruisecontrol1002473358.workers.dev",nocase; classtype:attempted-recon; sid:200004334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"latinotravel.cz",nocase; classtype:attempted-recon; sid:200004335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lattassq.hyperphp.com",nocase; classtype:attempted-recon; sid:200004336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"laubros.com",nocase; classtype:attempted-recon; sid:200004337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"launchpad.marketmaking.pro",nocase; classtype:attempted-recon; sid:200004338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"launchpadavalaunch.app",nocase; classtype:attempted-recon; sid:200004339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"laupvzbgrx.duckdns.org",nocase; classtype:attempted-recon; sid:200004340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lavozdegalapagos.com",nocase; classtype:attempted-recon; sid:200004341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"layanan-pembatalan-pemblokiran-93.weeblysite.com",nocase; classtype:attempted-recon; sid:200004342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lbcpaiement-com.ru",nocase; classtype:attempted-recon; sid:200004343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lcavantrbo.duckdns.org",nocase; classtype:attempted-recon; sid:200004344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lcpntlnlst.duckdns.org",nocase; classtype:attempted-recon; sid:200004345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lcstudios-infomativ89.top",nocase; classtype:attempted-recon; sid:200004346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ldegcblpzy.duckdns.org",nocase; classtype:attempted-recon; sid:200004347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"le-diablotin-rouen.com",nocase; classtype:attempted-recon; sid:200004348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"le-site-web-de-lapostenet1.yolasite.com",nocase; classtype:attempted-recon; sid:200004349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"le-site-web-de-postlu1.yolasite.com",nocase; classtype:attempted-recon; sid:200004350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leadspro.com.br",nocase; classtype:attempted-recon; sid:200004351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"learncricut.top",nocase; classtype:attempted-recon; sid:200004352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leassetlaw.com",nocase; classtype:attempted-recon; sid:200004353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leblancbrothers.leblancbrothers.workers.dev",nocase; classtype:attempted-recon; sid:200004354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leboncoin-okactif.35-180-51-79.plesk.page",nocase; classtype:attempted-recon; sid:200004355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leboncoin-verification-annonce.com",nocase; classtype:attempted-recon; sid:200004356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leboncon-sale-transaction-2926503910.fr",nocase; classtype:attempted-recon; sid:200004357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"legend-muddy-earwig.glitch.me",nocase; classtype:attempted-recon; sid:200004358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"legnoegiardino.com",nocase; classtype:attempted-recon; sid:200004359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leifertlaw.com",nocase; classtype:attempted-recon; sid:200004360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leilaopatiodetran-sp.org",nocase; classtype:attempted-recon; sid:200004361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lenil.academy",nocase; classtype:attempted-recon; sid:200004362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lenkaspares.com",nocase; classtype:attempted-recon; sid:200004363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lepjqyoadw.duckdns.org",nocase; classtype:attempted-recon; sid:200004364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leviathandesign.com.au",nocase; classtype:attempted-recon; sid:200004365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lew.la",nocase; classtype:attempted-recon; sid:200004366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lexy.pages.dev",nocase; classtype:attempted-recon; sid:200004367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lfksnalsdnlasdjl.hostfree.pw",nocase; classtype:attempted-recon; sid:200004368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lfmsbrr.cn",nocase; classtype:attempted-recon; sid:200004369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lfpe-globle.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lg-comerica.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lg-comerica.web.app",nocase; classtype:attempted-recon; sid:200004372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lg-onecom-io.web.app",nocase; classtype:attempted-recon; sid:200004373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lhetvmfhil.duckdns.org",nocase; classtype:attempted-recon; sid:200004374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lhezzehmyd.duckdns.org",nocase; classtype:attempted-recon; sid:200004375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lhjnb.cjhwyiw.cn",nocase; classtype:attempted-recon; sid:200004376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lhtiovt.cf",nocase; classtype:attempted-recon; sid:200004377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lhtiovt.ga",nocase; classtype:attempted-recon; sid:200004378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lhtiovt.ml",nocase; classtype:attempted-recon; sid:200004379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"libertyfood.ir",nocase; classtype:attempted-recon; sid:200004380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lienquan.garenia.vn",nocase; classtype:attempted-recon; sid:200004381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"life-aid.in",nocase; classtype:attempted-recon; sid:200004382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"liff-gateway.lineml.jp",nocase; classtype:attempted-recon; sid:200004383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"light-office.web.app",nocase; classtype:attempted-recon; sid:200004384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lightheartedlawngreenchords.galiciiaweb.repl.co",nocase; classtype:attempted-recon; sid:200004385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lihjvb.pthzib.cn",nocase; classtype:attempted-recon; sid:200004386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"like-eventlogins.ml",nocase; classtype:attempted-recon; sid:200004387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"limit-orders-v2.onrender.com",nocase; classtype:attempted-recon; sid:200004388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"limpingstylishthings.actigalicia00.repl.co",nocase; classtype:attempted-recon; sid:200004389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lingering-sun-f560.servicedeck.workers.dev",nocase; classtype:attempted-recon; sid:200004390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linio.applytojob.com",nocase; classtype:attempted-recon; sid:200004391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"liniomarkets.com",nocase; classtype:attempted-recon; sid:200004392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linipoin.com",nocase; classtype:attempted-recon; sid:200004393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"link.gmreg5.net",nocase; classtype:attempted-recon; sid:200004394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linlilyrose.com",nocase; classtype:attempted-recon; sid:200004395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"liquidationcenter.com",nocase; classtype:attempted-recon; sid:200004396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"litaliti.vn",nocase; classtype:attempted-recon; sid:200004397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lithiumbatteryresearch.com",nocase; classtype:attempted-recon; sid:200004398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"little-math-4e76.m-santiago3317.workers.dev",nocase; classtype:attempted-recon; sid:200004399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"little-snow-7f0c.westernboard.workers.dev",nocase; classtype:attempted-recon; sid:200004400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"little-sun-c135.woodedrose.workers.dev",nocase; classtype:attempted-recon; sid:200004401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"little-wood-23ca.abssupdatedlogin.workers.dev",nocase; classtype:attempted-recon; sid:200004402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"liusanchuan.github.io",nocase; classtype:attempted-recon; sid:200004403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"live-site.hopto.me",nocase; classtype:attempted-recon; sid:200004404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"liveconnectfix.com",nocase; classtype:attempted-recon; sid:200004405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"livecricketworldcup.com",nocase; classtype:attempted-recon; sid:200004406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"livelopontsbb.com",nocase; classtype:attempted-recon; sid:200004407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lively.marbauttulo.workers.dev",nocase; classtype:attempted-recon; sid:200004408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"livelymood.com",nocase; classtype:attempted-recon; sid:200004409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"livemusic24.xyz",nocase; classtype:attempted-recon; sid:200004410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"livetradepro.com",nocase; classtype:attempted-recon; sid:200004411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lizziguerra.com",nocase; classtype:attempted-recon; sid:200004412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ljuugttsff.duckdns.org",nocase; classtype:attempted-recon; sid:200004413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lkbhhpjcgm.duckdns.org",nocase; classtype:attempted-recon; sid:200004414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lkhjbn.wwhhye.cn",nocase; classtype:attempted-recon; sid:200004415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"llevedigital.broubnk2312.repl.co",nocase; classtype:attempted-recon; sid:200004416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"llilll.web.app",nocase; classtype:attempted-recon; sid:200004417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lllll9999.hyperphp.com",nocase; classtype:attempted-recon; sid:200004418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"llnhaiwgkc.duckdns.org",nocase; classtype:attempted-recon; sid:200004419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lloydsbank.secure-personal-device-login.com",nocase; classtype:attempted-recon; sid:200004420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"llyhugx.cluster028.hosting.ovh.net",nocase; classtype:attempted-recon; sid:200004421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lmy.de",nocase; classtype:attempted-recon; sid:200004422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lncsxsjmri.duckdns.org",nocase; classtype:attempted-recon; sid:200004423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lneurgal0ckdbr0u.mvfnhjwrugwqgr.repl.co",nocase; classtype:attempted-recon; sid:200004424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnmmordjae.duckdns.org",nocase; classtype:attempted-recon; sid:200004425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnsmdhdbvl.duckdns.org",nocase; classtype:attempted-recon; sid:200004426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnugsmcqbh.duckdns.org",nocase; classtype:attempted-recon; sid:200004427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnvfurioon.duckdns.org",nocase; classtype:attempted-recon; sid:200004428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loaegqafsi.duckdns.org",nocase; classtype:attempted-recon; sid:200004429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loansidemed.com",nocase; classtype:attempted-recon; sid:200004430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loathsomehungrydeeplearning.oscar34546.repl.co",nocase; classtype:attempted-recon; sid:200004431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"local-helpdesk.com",nocase; classtype:attempted-recon; sid:200004432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"localso.com",nocase; classtype:attempted-recon; sid:200004433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"log-defikingdams.com",nocase; classtype:attempted-recon; sid:200004434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-info.egsg943rgs.top",nocase; classtype:attempted-recon; sid:200004435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-folder.web.app",nocase; classtype:attempted-recon; sid:200004437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-1.web.app",nocase; classtype:attempted-recon; sid:200004439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-2.web.app",nocase; classtype:attempted-recon; sid:200004441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-3.web.app",nocase; classtype:attempted-recon; sid:200004443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-4.web.app",nocase; classtype:attempted-recon; sid:200004445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-5.web.app",nocase; classtype:attempted-recon; sid:200004447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-pdf-point.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-pdf-point.web.app",nocase; classtype:attempted-recon; sid:200004449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-share.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-share.web.app",nocase; classtype:attempted-recon; sid:200004451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder-1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder-1.web.app",nocase; classtype:attempted-recon; sid:200004453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder-2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder-2.web.app",nocase; classtype:attempted-recon; sid:200004455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder-3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder-3.web.app",nocase; classtype:attempted-recon; sid:200004457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder-4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder-4.web.app",nocase; classtype:attempted-recon; sid:200004459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder.web.app",nocase; classtype:attempted-recon; sid:200004461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-folder-agl-coa.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-folder-agl-coa.web.app",nocase; classtype:attempted-recon; sid:200004463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-id-file-storage.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-id-file-storage.web.app",nocase; classtype:attempted-recon; sid:200004465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-share-file-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-share-file-folder.web.app",nocase; classtype:attempted-recon; sid:200004467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-share-file-view.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-share-file-view.web.app",nocase; classtype:attempted-recon; sid:200004469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-microsoftonlineghhjjuigg.myportfolio.com",nocase; classtype:attempted-recon; sid:200004470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micrsoft-onedrive-signin.sansiro324wnet.ru",nocase; classtype:attempted-recon; sid:200004471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-net-micro-inv-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-net-micro-inv-folder.web.app",nocase; classtype:attempted-recon; sid:200004473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-prodx-att.com",nocase; classtype:attempted-recon; sid:200004474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-review-uk.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-review-uk.web.app",nocase; classtype:attempted-recon; sid:200004476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-share-file-folder-view.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-share-file-folder-view.web.app",nocase; classtype:attempted-recon; sid:200004478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-share-file-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-share-file-folder.web.app",nocase; classtype:attempted-recon; sid:200004480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-share-file-point-drive.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-share-file-point-drive.web.app",nocase; classtype:attempted-recon; sid:200004482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-view-share-folder-file.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-view-share-folder-file.web.app",nocase; classtype:attempted-recon; sid:200004484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-webmail.bubbleapps.io",nocase; classtype:attempted-recon; sid:200004485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login.activarusuario.repl.co",nocase; classtype:attempted-recon; sid:200004486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login.bitkub.gq",nocase; classtype:attempted-recon; sid:200004487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login1.sitelio.me",nocase; classtype:attempted-recon; sid:200004488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginbncr1.webcindario.com",nocase; classtype:attempted-recon; sid:200004489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"logindeyddghdattmailoo000i5.yolasite.com",nocase; classtype:attempted-recon; sid:200004490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginmicrosoftonline-remittancedeposit.myportfolio.com",nocase; classtype:attempted-recon; sid:200004491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginmicrosoftonlinens.myportfolio.com",nocase; classtype:attempted-recon; sid:200004492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginmicrosoftonlineproposal.myportfolio.com",nocase; classtype:attempted-recon; sid:200004493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginprim2.sslblindado.com",nocase; classtype:attempted-recon; sid:200004494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginscreenattinc.boxmode.io",nocase; classtype:attempted-recon; sid:200004495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginvocalorrannn.tender-wu.147-189-161-23.plesk.page",nocase; classtype:attempted-recon; sid:200004496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"logmedo.com",nocase; classtype:attempted-recon; sid:200004497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"logn-microsofton.shared8.workers.dev",nocase; classtype:attempted-recon; sid:200004498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"logn-mtb-online.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"logn-mtb-online.web.app",nocase; classtype:attempted-recon; sid:200004500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lojasmagalu.com",nocase; classtype:attempted-recon; sid:200004501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lojasvirtualon.com",nocase; classtype:attempted-recon; sid:200004502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lokhv.plhyybmmbdbhhsdkls.cn",nocase; classtype:attempted-recon; sid:200004503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lomadesarrollos.mx",nocase; classtype:attempted-recon; sid:200004504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lombia.banco1.repl.co",nocase; classtype:attempted-recon; sid:200004505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"long-math-2485.on.fleek.co",nocase; classtype:attempted-recon; sid:200004506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lonoss.azurewebsites.net",nocase; classtype:attempted-recon; sid:200004507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lookatmynewphotos.com",nocase; classtype:attempted-recon; sid:200004508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"looking-backward.my.id",nocase; classtype:attempted-recon; sid:200004509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lookinqatar.com",nocase; classtype:attempted-recon; sid:200004510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"looks-rare.awardprograms.epizy.com",nocase; classtype:attempted-recon; sid:200004511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"looksrare.cx",nocase; classtype:attempted-recon; sid:200004512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"looksraremarkets.com",nocase; classtype:attempted-recon; sid:200004513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"looksrase.org",nocase; classtype:attempted-recon; sid:200004514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"looksrrare.net",nocase; classtype:attempted-recon; sid:200004515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loopedcupes.com",nocase; classtype:attempted-recon; sid:200004516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lost.lostincovid.org",nocase; classtype:attempted-recon; sid:200004517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lot-lp-x.web.app",nocase; classtype:attempted-recon; sid:200004518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lotericainterestadual.com.br",nocase; classtype:attempted-recon; sid:200004519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lotosarcondicionado.com.br",nocase; classtype:attempted-recon; sid:200004520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loving.hiavsjsscpk.cn",nocase; classtype:attempted-recon; sid:200004521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lp.vp4.me",nocase; classtype:attempted-recon; sid:200004522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lplusd.com",nocase; classtype:attempted-recon; sid:200004523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lppljnlkyx.duckdns.org",nocase; classtype:attempted-recon; sid:200004524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lrs-office-tax-aids-finance-gov.com",nocase; classtype:attempted-recon; sid:200004525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lrs-tax-federals-informations-payment-help.com",nocase; classtype:attempted-recon; sid:200004526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lrsgov-office-network-agent-federal-helps.com",nocase; classtype:attempted-recon; sid:200004527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lrstax-federals-help-get-payment-status.com",nocase; classtype:attempted-recon; sid:200004528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lrstax-federalz-infrmshub-comunicate-profile.com",nocase; classtype:attempted-recon; sid:200004529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lrzxqqaepd.duckdns.org",nocase; classtype:attempted-recon; sid:200004530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lsdaeszzxsa.hostfree.pw",nocase; classtype:attempted-recon; sid:200004531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lsdxztzrx.liveblog365.com",nocase; classtype:attempted-recon; sid:200004532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lsweuyjbxl.duckdns.org",nocase; classtype:attempted-recon; sid:200004533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ltir681.top",nocase; classtype:attempted-recon; sid:200004534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lub-supply.com",nocase; classtype:attempted-recon; sid:200004535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lublvexokx.duckdns.org",nocase; classtype:attempted-recon; sid:200004536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"luciavent.com",nocase; classtype:attempted-recon; sid:200004537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lucindablackwell.com",nocase; classtype:attempted-recon; sid:200004538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lucky-hill-75b5.ryoung8760.workers.dev",nocase; classtype:attempted-recon; sid:200004539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lucky-rice-73a8.bizd134.workers.dev",nocase; classtype:attempted-recon; sid:200004540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lucy-walker.com",nocase; classtype:attempted-recon; sid:200004541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ludo14.com",nocase; classtype:attempted-recon; sid:200004542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"luisgc21.github.io",nocase; classtype:attempted-recon; sid:200004543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"luquecartera.com",nocase; classtype:attempted-recon; sid:200004544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"luuquocnghiem.com",nocase; classtype:attempted-recon; sid:200004545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"luviuekuxh.duckdns.org",nocase; classtype:attempted-recon; sid:200004546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lwhubcpppp.duckdns.org",nocase; classtype:attempted-recon; sid:200004547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lwqj.qqea.cryptosex.me",nocase; classtype:attempted-recon; sid:200004548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lydab.com",nocase; classtype:attempted-recon; sid:200004549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lyricstoo.com",nocase; classtype:attempted-recon; sid:200004550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lzonaextracash-solicitud.com",nocase; classtype:attempted-recon; sid:200004551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lzonaseguraextracashprestamosl.online",nocase; classtype:attempted-recon; sid:200004552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lzpjrhe.top",nocase; classtype:attempted-recon; sid:200004553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m-tsecurity.heldpay.com",nocase; classtype:attempted-recon; sid:200004554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.bitkubpro.com",nocase; classtype:attempted-recon; sid:200004555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.fancy-bush-cf01.marhabitas.workers.dev",nocase; classtype:attempted-recon; sid:200004556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.help.insecurpage.workers.dev",nocase; classtype:attempted-recon; sid:200004557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.licenseplates.tv",nocase; classtype:attempted-recon; sid:200004558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.protc.safty-pege.workers.dev",nocase; classtype:attempted-recon; sid:200004559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.recovery.safetyacount.workers.dev",nocase; classtype:attempted-recon; sid:200004560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.recovery.saftypageupdate.workers.dev",nocase; classtype:attempted-recon; sid:200004561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.still-band-a6a6.saftyalrt.workers.dev",nocase; classtype:attempted-recon; sid:200004562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.super-recipe-d45d.sombodysad.workers.dev",nocase; classtype:attempted-recon; sid:200004563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m1agence.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m1agence.web.app",nocase; classtype:attempted-recon; sid:200004565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m1bzz8.csb.app",nocase; classtype:attempted-recon; sid:200004566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m2agence.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m2agence.web.app",nocase; classtype:attempted-recon; sid:200004568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m3agence.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m3agence.web.app",nocase; classtype:attempted-recon; sid:200004570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m42club.com",nocase; classtype:attempted-recon; sid:200004571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m4agence.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m4agence.web.app",nocase; classtype:attempted-recon; sid:200004573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m5agence.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m5agence.web.app",nocase; classtype:attempted-recon; sid:200004575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m6agence.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m6agence.web.app",nocase; classtype:attempted-recon; sid:200004577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ma-demandeameli.org",nocase; classtype:attempted-recon; sid:200004578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; classtype:attempted-recon; sid:200004579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"madaysan.com",nocase; classtype:attempted-recon; sid:200004580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"madens.com.pl",nocase; classtype:attempted-recon; sid:200004581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"madeupanimatedoffices.informagaliciaa.repl.co",nocase; classtype:attempted-recon; sid:200004582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"madrid-web-home.blogspot.com",nocase; classtype:attempted-recon; sid:200004583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"madusppm.com",nocase; classtype:attempted-recon; sid:200004584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maestro.my.prod.dfg152.ru",nocase; classtype:attempted-recon; sid:200004585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magaduzela.co.za",nocase; classtype:attempted-recon; sid:200004586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magiamgiashopee.com",nocase; classtype:attempted-recon; sid:200004587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magiceden-box.info",nocase; classtype:attempted-recon; sid:200004588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magiceden-mystery.info",nocase; classtype:attempted-recon; sid:200004589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magiceden-premium.com",nocase; classtype:attempted-recon; sid:200004590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magicedenbox.com",nocase; classtype:attempted-recon; sid:200004591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magicreator.com",nocase; classtype:attempted-recon; sid:200004592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magicvelocityrating.com",nocase; classtype:attempted-recon; sid:200004593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magnumforces.com",nocase; classtype:attempted-recon; sid:200004594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mahikapur.in",nocase; classtype:attempted-recon; sid:200004595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail-ovhcloud.web.app",nocase; classtype:attempted-recon; sid:200004596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail-ssocloud-srvr67yhguh.pages.dev",nocase; classtype:attempted-recon; sid:200004597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.20-120-21-100.cprapid.com",nocase; classtype:attempted-recon; sid:200004598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.bungalowdubai.com",nocase; classtype:attempted-recon; sid:200004599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.clamps.jp",nocase; classtype:attempted-recon; sid:200004600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.derbyde.ae",nocase; classtype:attempted-recon; sid:200004601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.doorstepsales.com",nocase; classtype:attempted-recon; sid:200004602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.estartupchallenge-egabon.org",nocase; classtype:attempted-recon; sid:200004603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.greentradeenergy.za.com",nocase; classtype:attempted-recon; sid:200004604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.ims-fe.com",nocase; classtype:attempted-recon; sid:200004605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.lolwhoa.com",nocase; classtype:attempted-recon; sid:200004606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.lxman.com.tw",nocase; classtype:attempted-recon; sid:200004607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.mksc.co.tz",nocase; classtype:attempted-recon; sid:200004608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.pdc13.com",nocase; classtype:attempted-recon; sid:200004609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.prithvisai.com",nocase; classtype:attempted-recon; sid:200004610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.wslconstrucoes.com",nocase; classtype:attempted-recon; sid:200004611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.zieglergroup.net",nocase; classtype:attempted-recon; sid:200004612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail01.moncompte.f.appsuite.default.folder.ugc.umc.edu.np",nocase; classtype:attempted-recon; sid:200004613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail04.appsuite.app.portail.pcvegas-hospice.com",nocase; classtype:attempted-recon; sid:200004614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail1.goggle.workers.dev",nocase; classtype:attempted-recon; sid:200004615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail11.goggle.workers.dev",nocase; classtype:attempted-recon; sid:200004616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail2.goggle.workers.dev",nocase; classtype:attempted-recon; sid:200004617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail3.goggle.workers.dev",nocase; classtype:attempted-recon; sid:200004618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailbtinternet.github.io",nocase; classtype:attempted-recon; sid:200004619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailer7.onedrive0001.workers.dev",nocase; classtype:attempted-recon; sid:200004620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailforupdateittimenow.weeblysite.com",nocase; classtype:attempted-recon; sid:200004621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailinc.yolasite.com",nocase; classtype:attempted-recon; sid:200004622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailplusrolerequestedprivatemailupdates.pages.dev",nocase; classtype:attempted-recon; sid:200004623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailserver7656566.blob.core.windows.net",nocase; classtype:attempted-recon; sid:200004624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mainbscrectify.com",nocase; classtype:attempted-recon; sid:200004625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mainnetdapp.app",nocase; classtype:attempted-recon; sid:200004626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mainnetdappbot.net",nocase; classtype:attempted-recon; sid:200004627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majesticmeads.com",nocase; classtype:attempted-recon; sid:200004628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makmurjayaprinting.com",nocase; classtype:attempted-recon; sid:200004629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makstcs-go.ru",nocase; classtype:attempted-recon; sid:200004630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mala.pe",nocase; classtype:attempted-recon; sid:200004631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"malaprontaargentina.com.br",nocase; classtype:attempted-recon; sid:200004632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"malgritrarkna.com",nocase; classtype:attempted-recon; sid:200004633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"malhwszybr.duckdns.org",nocase; classtype:attempted-recon; sid:200004634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mamavapes.com",nocase; classtype:attempted-recon; sid:200004635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mamifoundation.org",nocase; classtype:attempted-recon; sid:200004636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mamkefu.kanuomei.com",nocase; classtype:attempted-recon; sid:200004637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"manage-transaction-deny.com",nocase; classtype:attempted-recon; sid:200004638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"managearubas.com",nocase; classtype:attempted-recon; sid:200004639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"managerpaketinfo.com",nocase; classtype:attempted-recon; sid:200004640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"managesaas.com",nocase; classtype:attempted-recon; sid:200004641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mancataconsegnacard.com",nocase; classtype:attempted-recon; sid:200004642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandatorydeal.co.za",nocase; classtype:attempted-recon; sid:200004643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandiriutamacapital.id",nocase; classtype:attempted-recon; sid:200004644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mangrove-cyclic-zipper.glitch.me",nocase; classtype:attempted-recon; sid:200004645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mannixing.com",nocase; classtype:attempted-recon; sid:200004646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mapos.us",nocase; classtype:attempted-recon; sid:200004647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mapsa.com.pe",nocase; classtype:attempted-recon; sid:200004648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marcelotoledo.net",nocase; classtype:attempted-recon; sid:200004649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marelliinmobiliaria.com.ar",nocase; classtype:attempted-recon; sid:200004650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mariaamjad.com",nocase; classtype:attempted-recon; sid:200004651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"market-immutable.xyz",nocase; classtype:attempted-recon; sid:200004652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"market-mcsgo.ru",nocase; classtype:attempted-recon; sid:200004653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"market-vjnted.932183.xyz",nocase; classtype:attempted-recon; sid:200004654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marketplace-axieinfinity.io",nocase; classtype:attempted-recon; sid:200004655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marketplace.axieinfinity.gq",nocase; classtype:attempted-recon; sid:200004656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marketplace.axieinflinity.io",nocase; classtype:attempted-recon; sid:200004657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marketplacelnfinytlaxi.com",nocase; classtype:attempted-recon; sid:200004658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"markos.cc",nocase; classtype:attempted-recon; sid:200004659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marlonmedia.de",nocase; classtype:attempted-recon; sid:200004660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"martakla.com",nocase; classtype:attempted-recon; sid:200004661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"martinfernando.org",nocase; classtype:attempted-recon; sid:200004662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marvelousmean.22413.repl.co",nocase; classtype:attempted-recon; sid:200004663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masceaesnccsaaserd.maseccceaoooearescooosesaserd.rinlvb.top",nocase; classtype:attempted-recon; sid:200004664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masceaesnccsaaserd.maseccceaoooearescoooseserd.mfwrsg.top",nocase; classtype:attempted-recon; sid:200004665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masceaesnccsaaserd.masecocsaaosearescoooseccsoerd.qmponh.top",nocase; classtype:attempted-recon; sid:200004666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masceaesnccsaaserd.masecocsaeorearescoooseccsod.mfwrsg.top",nocase; classtype:attempted-recon; sid:200004667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masceaesnccsaaserd.masecocsaeorearescooosed.mfwrsg.top",nocase; classtype:attempted-recon; sid:200004668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masceanrd.macosasccsoerd.0633348.xyz",nocase; classtype:attempted-recon; sid:200004669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masceanrd.macoserccsod.4687999.xyz",nocase; classtype:attempted-recon; sid:200004670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascioosoerd.masicesccrerd.wenbms.top",nocase; classtype:attempted-recon; sid:200004671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masciososoerd.maiseccescrerd.pagrhw.top",nocase; classtype:attempted-recon; sid:200004672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascoosoerd.mascesccrerd.mgjuxa.top",nocase; classtype:attempted-recon; sid:200004673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascoosoerd.mascesccrerd.mojnlk.top",nocase; classtype:attempted-recon; sid:200004674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascoosoerd.mascesccrerd.vwqsly.top",nocase; classtype:attempted-recon; sid:200004675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascosoerd.mascescrerd.mecozi.top",nocase; classtype:attempted-recon; sid:200004676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascosoerd.mascescrerd.mgjuxa.top",nocase; classtype:attempted-recon; sid:200004677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascosoerd.mascescrerd.msnwrh.top",nocase; classtype:attempted-recon; sid:200004678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascosoerd.mascescrerd.qxkahc.top",nocase; classtype:attempted-recon; sid:200004679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascosoerd.mascescrerd.sqltjt.top",nocase; classtype:attempted-recon; sid:200004680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascosoerd.mascescrerd.tfiaai.top",nocase; classtype:attempted-recon; sid:200004681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascosoerd.mascescrerd.tsskwx.top",nocase; classtype:attempted-recon; sid:200004682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascososoerd.maseccescrerd.nnsbbm.top",nocase; classtype:attempted-recon; sid:200004683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascososoerd.maseccescrerd.qxkahc.top",nocase; classtype:attempted-recon; sid:200004684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascososoerd.maseccescrerd.wenbms.top",nocase; classtype:attempted-recon; sid:200004685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsosoerd.masecescrerd.mecozi.top",nocase; classtype:attempted-recon; sid:200004686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsosoerd.masecescrerd.qtaywc.top",nocase; classtype:attempted-recon; sid:200004687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsosoerd.masecescrerd.rkbxko.top",nocase; classtype:attempted-recon; sid:200004688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsosoerd.masecescrerd.wenbms.top",nocase; classtype:attempted-recon; sid:200004689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masecoocsoersd.moasecsecsccrerd.gnpais.top",nocase; classtype:attempted-recon; sid:200004690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maseecece.cseoaerrsdoeear.sieocoseicencsecrercceesoerdas.thch.com.cn",nocase; classtype:attempted-recon; sid:200004691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maseecooscseoerrsd.cmoeasieocsecencaseosccrerccesoed.lhss.co",nocase; classtype:attempted-recon; sid:200004692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maseeseosiceoorcsoecrsed.ieomsocenaaseocseucoccesoesecsccrerd.vayz.co",nocase; classtype:attempted-recon; sid:200004693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maseeseosiceosrcoercdse.mieoasocensaseocceueoccesoessccrerd.bibg.co",nocase; classtype:attempted-recon; sid:200004694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maseeseosicesorcsoecrsed.ieomsocenaaseocseueoccesoesccescrerd.ktiv.co",nocase; classtype:attempted-recon; sid:200004695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maseseoicsocsoersd.emsoacseueosccescrerd.gnpais.top",nocase; classtype:attempted-recon; sid:200004696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mashraqisteel.com",nocase; classtype:attempted-recon; sid:200004697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masoresesrd.masorecocsrd.wechain.top",nocase; classtype:attempted-recon; sid:200004698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"master-moulds.com",nocase; classtype:attempted-recon; sid:200004699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mastercodes.com",nocase; classtype:attempted-recon; sid:200004700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masterplan.access.floppytits.net",nocase; classtype:attempted-recon; sid:200004701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mastologia.cl",nocase; classtype:attempted-recon; sid:200004702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"matamask.info",nocase; classtype:attempted-recon; sid:200004703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"match.lookatmynewphotos.com",nocase; classtype:attempted-recon; sid:200004704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mathelin-teinture-tissus.com",nocase; classtype:attempted-recon; sid:200004705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"matketlaceaxelndinide.com",nocase; classtype:attempted-recon; sid:200004706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maxchemicals.com.np",nocase; classtype:attempted-recon; sid:200004707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maximazer-inv.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maximazer-inv.web.app",nocase; classtype:attempted-recon; sid:200004709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maxis-winner-2020.webs.com",nocase; classtype:attempted-recon; sid:200004710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maya.in.ua",nocase; classtype:attempted-recon; sid:200004711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mayoristaalapublica.com",nocase; classtype:attempted-recon; sid:200004712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mayrezult.github.io",nocase; classtype:attempted-recon; sid:200004713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mbarquitecto.cl",nocase; classtype:attempted-recon; sid:200004714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mbegxhvrbz.duckdns.org",nocase; classtype:attempted-recon; sid:200004715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mbgvuemwir.duckdns.org",nocase; classtype:attempted-recon; sid:200004716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mbnern.webcindario.com",nocase; classtype:attempted-recon; sid:200004717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mbrcnk3wz12o.ml",nocase; classtype:attempted-recon; sid:200004718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mccarthyelectrical.com",nocase; classtype:attempted-recon; sid:200004719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mcconcep.cluster005.ovh.net",nocase; classtype:attempted-recon; sid:200004720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mchenpmkhz.duckdns.org",nocase; classtype:attempted-recon; sid:200004721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mchganistore.solofolio.net",nocase; classtype:attempted-recon; sid:200004722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mcomkchonjp.top",nocase; classtype:attempted-recon; sid:200004723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mcsr.co",nocase; classtype:attempted-recon; sid:200004724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mcwfqbhrpt.duckdns.org",nocase; classtype:attempted-recon; sid:200004725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"md-3.whb.tempwebhost.net",nocase; classtype:attempted-recon; sid:200004726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mdurucan.com",nocase; classtype:attempted-recon; sid:200004727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mdzxpodz.com",nocase; classtype:attempted-recon; sid:200004728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"me-dhl-il-online.preview-domain.com",nocase; classtype:attempted-recon; sid:200004729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meakadxad2.dytsa2.cf",nocase; classtype:attempted-recon; sid:200004730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"measypipie.duckdns.org",nocase; classtype:attempted-recon; sid:200004731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mecanismodeseguranca.site",nocase; classtype:attempted-recon; sid:200004732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"medelinahealth.com",nocase; classtype:attempted-recon; sid:200004733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mediafiree-downloadss2.dynssl.com",nocase; classtype:attempted-recon; sid:200004734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"medo.world",nocase; classtype:attempted-recon; sid:200004735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meeps.special-mint.com",nocase; classtype:attempted-recon; sid:200004736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meeting-23900123090123.bitbucket.io",nocase; classtype:attempted-recon; sid:200004737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"megaparseonalse.com",nocase; classtype:attempted-recon; sid:200004738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"megaprasonels.net",nocase; classtype:attempted-recon; sid:200004739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meine-postbank-de.com",nocase; classtype:attempted-recon; sid:200004740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mekidelivery.my.id",nocase; classtype:attempted-recon; sid:200004741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"melbournecompany.com",nocase; classtype:attempted-recon; sid:200004742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"melchiori.org",nocase; classtype:attempted-recon; sid:200004743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mellowgiddyvideogames.galiticiqsa.repl.co",nocase; classtype:attempted-recon; sid:200004744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"membersiberostartheclub.com.mx",nocase; classtype:attempted-recon; sid:200004745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"memoriamapu.cl",nocase; classtype:attempted-recon; sid:200004746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mendami.com",nocase; classtype:attempted-recon; sid:200004747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mens.vn",nocase; classtype:attempted-recon; sid:200004748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mercado-pago-acessologinx.siteprofissional.com",nocase; classtype:attempted-recon; sid:200004749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mercadopago-ptbr.siteprofissional.com",nocase; classtype:attempted-recon; sid:200004750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"merdas.ir",nocase; classtype:attempted-recon; sid:200004751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mesacanada.com",nocase; classtype:attempted-recon; sid:200004752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mesdesjunhoamerican.com",nocase; classtype:attempted-recon; sid:200004753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meservoritaoritasu.gillsuttle.co.uk",nocase; classtype:attempted-recon; sid:200004754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"message-webapp2242022-1311426938.cos.ap-nanjing.myqcloud.com",nocase; classtype:attempted-recon; sid:200004755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"messagecenter.com.br",nocase; classtype:attempted-recon; sid:200004756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"messagerie-orange210.yolasite.com",nocase; classtype:attempted-recon; sid:200004757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"messagerie-vocale-mobile-sfr-20222.yolasite.com",nocase; classtype:attempted-recon; sid:200004758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"messagerievocaleorange.podia.com",nocase; classtype:attempted-recon; sid:200004759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"messari.cx",nocase; classtype:attempted-recon; sid:200004760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"messengerverifyaccess.elementor.cloud",nocase; classtype:attempted-recon; sid:200004761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mestertignseekjet4.blogspot.com",nocase; classtype:attempted-recon; sid:200004762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mestertignseekjet5.blogspot.com",nocase; classtype:attempted-recon; sid:200004763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mestertignseekjet6.blogspot.com",nocase; classtype:attempted-recon; sid:200004764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mestredaobra.com",nocase; classtype:attempted-recon; sid:200004765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meta.caseid1000061361161.com",nocase; classtype:attempted-recon; sid:200004766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metacase106524672.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metacase106524672.web.app",nocase; classtype:attempted-recon; sid:200004768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metaciteacn.noisy-scene-1d5c.rcvrypegsfty.workers.dev",nocase; classtype:attempted-recon; sid:200004769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metaconects.com",nocase; classtype:attempted-recon; sid:200004770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metadopt.minti.live",nocase; classtype:attempted-recon; sid:200004771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metaforaccounts100052.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metahelpsupp.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metahelpsupp.web.app",nocase; classtype:attempted-recon; sid:200004774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metaiimassk.azurewebsites.net",nocase; classtype:attempted-recon; sid:200004775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamakwallet.unaux.com",nocase; classtype:attempted-recon; sid:200004776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamarkkyc.net",nocase; classtype:attempted-recon; sid:200004777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-2au.pages.dev",nocase; classtype:attempted-recon; sid:200004778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-br.jhone.link",nocase; classtype:attempted-recon; sid:200004779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-download.com",nocase; classtype:attempted-recon; sid:200004780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-extension-official.blogspot.com",nocase; classtype:attempted-recon; sid:200004781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-extension-web3-dapps.blogspot.com",nocase; classtype:attempted-recon; sid:200004782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-io.biz",nocase; classtype:attempted-recon; sid:200004783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-nft.io",nocase; classtype:attempted-recon; sid:200004784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-partenaires.com",nocase; classtype:attempted-recon; sid:200004785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-r.jhone.link",nocase; classtype:attempted-recon; sid:200004786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-wallet-security.com",nocase; classtype:attempted-recon; sid:200004787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-wallet-verification.com",nocase; classtype:attempted-recon; sid:200004788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-wallet.ru",nocase; classtype:attempted-recon; sid:200004789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.cash",nocase; classtype:attempted-recon; sid:200004790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.cm",nocase; classtype:attempted-recon; sid:200004791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.en.download.it",nocase; classtype:attempted-recon; sid:200004792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.financial",nocase; classtype:attempted-recon; sid:200004793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.io-t5ik8.io-srt777.quest",nocase; classtype:attempted-recon; sid:200004794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.io.securitycloud.in",nocase; classtype:attempted-recon; sid:200004795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.study",nocase; classtype:attempted-recon; sid:200004796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask004.com",nocase; classtype:attempted-recon; sid:200004797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaskchat.com",nocase; classtype:attempted-recon; sid:200004798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaskey.com",nocase; classtype:attempted-recon; sid:200004799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaskios.com",nocase; classtype:attempted-recon; sid:200004800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamasks-validate.com",nocase; classtype:attempted-recon; sid:200004801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamasks.vip",nocase; classtype:attempted-recon; sid:200004802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamasktoken.github.io",nocase; classtype:attempted-recon; sid:200004803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaskwallet.com.cn",nocase; classtype:attempted-recon; sid:200004804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaskwallet.easy.co",nocase; classtype:attempted-recon; sid:200004805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metarnesk.com",nocase; classtype:attempted-recon; sid:200004806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metaup-defi.com",nocase; classtype:attempted-recon; sid:200004807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metaverifizaiona.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metaverifizaiona.web.app",nocase; classtype:attempted-recon; sid:200004809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meterglare.com",nocase; classtype:attempted-recon; sid:200004810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metrocastlogin.weebly.com",nocase; classtype:attempted-recon; sid:200004811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metropolisclouds.com",nocase; classtype:attempted-recon; sid:200004812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meufgts.app.br",nocase; classtype:attempted-recon; sid:200004813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meusabor.com.br",nocase; classtype:attempted-recon; sid:200004814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meuttutdkj.duckdns.org",nocase; classtype:attempted-recon; sid:200004815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mewscc09.pages.dev",nocase; classtype:attempted-recon; sid:200004816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mfacebook.blogspot.com.cy",nocase; classtype:attempted-recon; sid:200004817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mfacebook.blogspot.lt",nocase; classtype:attempted-recon; sid:200004818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mfacebook.blogspot.rs",nocase; classtype:attempted-recon; sid:200004819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mgkfhvvejr.duckdns.org",nocase; classtype:attempted-recon; sid:200004820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mhhlis.ml",nocase; classtype:attempted-recon; sid:200004821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mi-dinero.com",nocase; classtype:attempted-recon; sid:200004822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miasjntrcy.duckdns.org",nocase; classtype:attempted-recon; sid:200004823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miasuke.net",nocase; classtype:attempted-recon; sid:200004824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mibancocrece.com.co",nocase; classtype:attempted-recon; sid:200004825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mic-cinautheticate.pages.dev",nocase; classtype:attempted-recon; sid:200004826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micaridi.moasecsecsccrerd.btqhqpo.cn",nocase; classtype:attempted-recon; sid:200004827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miccrosoftoffice365.myportfolio.com",nocase; classtype:attempted-recon; sid:200004828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"michaelsteel.com.au",nocase; classtype:attempted-recon; sid:200004829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-drive-login-share-file.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-drive-login-share-file.web.app",nocase; classtype:attempted-recon; sid:200004831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-file-share-folder-dbtc.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-file-share-folder-dbtc.web.app",nocase; classtype:attempted-recon; sid:200004833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-file-share-folder-detc.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-file-share-folder-detc.web.app",nocase; classtype:attempted-recon; sid:200004835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-file-share-folder-mctc.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-file-share-folder-mctc.web.app",nocase; classtype:attempted-recon; sid:200004837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-file-share-folder-shtc.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-file-share-folder-shtc.web.app",nocase; classtype:attempted-recon; sid:200004839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-login-document-share.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-login-document-share.web.app",nocase; classtype:attempted-recon; sid:200004841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-login-share-file-device.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-login-share-file-device.web.app",nocase; classtype:attempted-recon; sid:200004843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-share-file-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-share-file-folder.web.app",nocase; classtype:attempted-recon; sid:200004845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro50495045045.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro50495045045.web.app",nocase; classtype:attempted-recon; sid:200004847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microadobe.myportfolio.com",nocase; classtype:attempted-recon; sid:200004848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microcav.square.site",nocase; classtype:attempted-recon; sid:200004849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsfotoffice86572.jogengineerin.workers.dev",nocase; classtype:attempted-recon; sid:200004850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoft-108486.square.site",nocase; classtype:attempted-recon; sid:200004851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoft-azuresecurelogin.myportfolio.com",nocase; classtype:attempted-recon; sid:200004852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoft-mail-outlook.myportfolio.com",nocase; classtype:attempted-recon; sid:200004853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoft-outlook365.myportfolio.com",nocase; classtype:attempted-recon; sid:200004854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoft17711485baccount.yolasite.com",nocase; classtype:attempted-recon; sid:200004855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoft2210.yolasite.com",nocase; classtype:attempted-recon; sid:200004856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoftcloud-azure.myportfolio.com",nocase; classtype:attempted-recon; sid:200004857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoftoffice365credentials.myportfolio.com",nocase; classtype:attempted-recon; sid:200004858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoftofficesecure.myportfolio.com",nocase; classtype:attempted-recon; sid:200004859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoftonlineonedrive.myportfolio.com",nocase; classtype:attempted-recon; sid:200004860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoftsharepointportal.myportfolio.com",nocase; classtype:attempted-recon; sid:200004861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoftvoffice.myportfolio.com",nocase; classtype:attempted-recon; sid:200004862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoftwebserver.mfs.gg",nocase; classtype:attempted-recon; sid:200004863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoftxxxxxxxxjdhgdhjxhghjdhhgonedrivejhgfghjskxxx.myportfolio.com",nocase; classtype:attempted-recon; sid:200004864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micuenta01.github.io",nocase; classtype:attempted-recon; sid:200004865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"midas-realll-free-uc-claim-noww.duckdns.org",nocase; classtype:attempted-recon; sid:200004866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"midas-topup-free-ucpubg.duckdns.org",nocase; classtype:attempted-recon; sid:200004867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"midasbuy-free-uc-pubg.duckdns.org",nocase; classtype:attempted-recon; sid:200004868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"middletonheatandair.com",nocase; classtype:attempted-recon; sid:200004869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"midwesthomesinc.com",nocase; classtype:attempted-recon; sid:200004870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mierxbwvsh.duckdns.org",nocase; classtype:attempted-recon; sid:200004871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"migrainesp.com",nocase; classtype:attempted-recon; sid:200004872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miigrattemefromonetov2.xyz",nocase; classtype:attempted-recon; sid:200004873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miiititip.com",nocase; classtype:attempted-recon; sid:200004874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mildanimatedmotion.fern5642.repl.co",nocase; classtype:attempted-recon; sid:200004875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miles-and-more.kartenabrechng.de",nocase; classtype:attempted-recon; sid:200004876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"milonsquashclub.synergeelabs.com",nocase; classtype:attempted-recon; sid:200004877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"milwaukee8.com",nocase; classtype:attempted-recon; sid:200004878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"milyoner.me",nocase; classtype:attempted-recon; sid:200004879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mimitian.duckdns.org",nocase; classtype:attempted-recon; sid:200004880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"minargamerbd.com",nocase; classtype:attempted-recon; sid:200004881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mindlessadeptbraces.galiiclia.repl.co",nocase; classtype:attempted-recon; sid:200004882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"minerlee.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200004883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mingming20160152.github.io",nocase; classtype:attempted-recon; sid:200004884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miniurl.ws",nocase; classtype:attempted-recon; sid:200004885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mircosoft365onedrivexxxxnnnnmmmmmsssssx.myportfolio.com",nocase; classtype:attempted-recon; sid:200004886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mircosoftdocsign.myportfolio.com",nocase; classtype:attempted-recon; sid:200004887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mircrosofti.myportfolio.com",nocase; classtype:attempted-recon; sid:200004888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miredireebrou.meridireebrou.repl.co",nocase; classtype:attempted-recon; sid:200004889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mirrorfamily-ak.ru",nocase; classtype:attempted-recon; sid:200004890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"missionshashank.org",nocase; classtype:attempted-recon; sid:200004891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mistabadseed.com",nocase; classtype:attempted-recon; sid:200004892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"misterfercanlok.mosterf09.repl.co",nocase; classtype:attempted-recon; sid:200004893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"misty-band-9f1c.driveloadve.workers.dev",nocase; classtype:attempted-recon; sid:200004894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"misty-base-2a16.dappy0542-mails-files1101.workers.dev",nocase; classtype:attempted-recon; sid:200004895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"misty-credit-a641.george72972323.workers.dev",nocase; classtype:attempted-recon; sid:200004896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mit-alert01a.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mit-alert01a.web.app",nocase; classtype:attempted-recon; sid:200004898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mit1securenow.com",nocase; classtype:attempted-recon; sid:200004899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mitt1secure.com",nocase; classtype:attempted-recon; sid:200004900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mityurl.com",nocase; classtype:attempted-recon; sid:200004901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miurausa.com",nocase; classtype:attempted-recon; sid:200004902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjayme9jdg9izxixmjeydgg.filesusr.com",nocase; classtype:attempted-recon; sid:200004903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjayme9jdg9izxiymjnyza.filesusr.com",nocase; classtype:attempted-recon; sid:200004904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1heta1dgg.filesusr.com",nocase; classtype:attempted-recon; sid:200004905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetezmtj0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200004906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetgym3jk.filesusr.com",nocase; classtype:attempted-recon; sid:200004907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetizmtl0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200004908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetqymhro.filesusr.com",nocase; classtype:attempted-recon; sid:200004909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetu3dgg.filesusr.com",nocase; classtype:attempted-recon; sid:200004910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetuymhro.filesusr.com",nocase; classtype:attempted-recon; sid:200004911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu5vdmvtymvymji5dgg.filesusr.com",nocase; classtype:attempted-recon; sid:200004912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu5vdmvtymvymtexdgg.filesusr.com",nocase; classtype:attempted-recon; sid:200004913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymuf1z3vzdde4mtf0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200004914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymufwcmlsmde5dgg.filesusr.com",nocase; classtype:attempted-recon; sid:200004915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymup1bhk0mtf0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200004916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymup1bhk1mtr0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200004917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymup1bhkzmtn0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200004918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymup1bmu0mtf0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200004919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymup1bmuymzfzda.filesusr.com",nocase; classtype:attempted-recon; sid:200004920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymuphbnvhcnkxmzv0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200004921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymurly2vtymvymjiyn3ro.filesusr.com",nocase; classtype:attempted-recon; sid:200004922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymvnlchrlbwjlcjizmxn0.filesusr.com",nocase; classtype:attempted-recon; sid:200004923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjegmcravg.duckdns.org",nocase; classtype:attempted-recon; sid:200004924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjuctdlgqk.duckdns.org",nocase; classtype:attempted-recon; sid:200004925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvacaptcha1.ml",nocase; classtype:attempted-recon; sid:200004926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvacaptcha10.ml",nocase; classtype:attempted-recon; sid:200004927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvacaptcha12.ml",nocase; classtype:attempted-recon; sid:200004928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvacaptcha13.ml",nocase; classtype:attempted-recon; sid:200004929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvacaptcha14.ml",nocase; classtype:attempted-recon; sid:200004930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvacaptcha15.ml",nocase; classtype:attempted-recon; sid:200004931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvacaptcha16.ml",nocase; classtype:attempted-recon; sid:200004932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvacaptcha17.ml",nocase; classtype:attempted-recon; sid:200004933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvacaptcha18.ml",nocase; classtype:attempted-recon; sid:200004934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvacaptcha19.ml",nocase; classtype:attempted-recon; sid:200004935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvacaptcha2.ml",nocase; classtype:attempted-recon; sid:200004936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvacaptcha20.ml",nocase; classtype:attempted-recon; sid:200004937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvacaptcha6.ml",nocase; classtype:attempted-recon; sid:200004938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvacaptcha7.ml",nocase; classtype:attempted-recon; sid:200004939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvacaptcha8.ml",nocase; classtype:attempted-recon; sid:200004940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvacaptcha9.ml",nocase; classtype:attempted-recon; sid:200004941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvjune22.ml",nocase; classtype:attempted-recon; sid:200004942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvredirects10.ml",nocase; classtype:attempted-recon; sid:200004943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvredirects2.ml",nocase; classtype:attempted-recon; sid:200004944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvredirects3.ml",nocase; classtype:attempted-recon; sid:200004945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvredirects4.ml",nocase; classtype:attempted-recon; sid:200004946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvredirects5.ml",nocase; classtype:attempted-recon; sid:200004947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvredirects6.ml",nocase; classtype:attempted-recon; sid:200004948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvredirects7.ml",nocase; classtype:attempted-recon; sid:200004949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvredirects8.ml",nocase; classtype:attempted-recon; sid:200004950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkvredirects9.ml",nocase; classtype:attempted-recon; sid:200004951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mlfremobs.duia.eu",nocase; classtype:attempted-recon; sid:200004952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mm88icon.bet",nocase; classtype:attempted-recon; sid:200004953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mma99a.hyperphp.com",nocase; classtype:attempted-recon; sid:200004954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mmeqqpqerz.duckdns.org",nocase; classtype:attempted-recon; sid:200004955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mmfdiaishb.duckdns.org",nocase; classtype:attempted-recon; sid:200004956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mmgprosa.com",nocase; classtype:attempted-recon; sid:200004957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mmkc.seguridadp3.com",nocase; classtype:attempted-recon; sid:200004958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mmmmnnzllm.duckdns.org",nocase; classtype:attempted-recon; sid:200004959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mmsnoreplysms.flazio.com",nocase; classtype:attempted-recon; sid:200004960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mmubxtawrk.duckdns.org",nocase; classtype:attempted-recon; sid:200004961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mmwzswjgsy.duckdns.org",nocase; classtype:attempted-recon; sid:200004962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mn-finamce.com",nocase; classtype:attempted-recon; sid:200004963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mngernews-updteappshlpzinfmrs-vrtfffyacntspokamrame.com",nocase; classtype:attempted-recon; sid:200004964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mobiadvanced.net",nocase; classtype:attempted-recon; sid:200004965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mobile.meta-pages.workers.dev",nocase; classtype:attempted-recon; sid:200004966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mobilesuica.com.cgtfw.com",nocase; classtype:attempted-recon; sid:200004967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"moccasinmediumorchidfilesize.techsusa.repl.co",nocase; classtype:attempted-recon; sid:200004968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mockmnocom.buzz",nocase; classtype:attempted-recon; sid:200004969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mockmnocom.top",nocase; classtype:attempted-recon; sid:200004970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"modestdemandingfrontpage.galiiciaap0.repl.co",nocase; classtype:attempted-recon; sid:200004971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"modulo12pjdesco.com",nocase; classtype:attempted-recon; sid:200004972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"moelink.org",nocase; classtype:attempted-recon; sid:200004973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mohhefvyks.duckdns.org",nocase; classtype:attempted-recon; sid:200004974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mon-token.com",nocase; classtype:attempted-recon; sid:200004975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monapigoogle000.page.link",nocase; classtype:attempted-recon; sid:200004976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monespaca.blogspot.com",nocase; classtype:attempted-recon; sid:200004977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monirshouvo.github.io",nocase; classtype:attempted-recon; sid:200004978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monitorpopular.hostfree.pw",nocase; classtype:attempted-recon; sid:200004979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"montessorinttc.com",nocase; classtype:attempted-recon; sid:200004980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monyeward.com",nocase; classtype:attempted-recon; sid:200004981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monzo.login-cancel.net",nocase; classtype:attempted-recon; sid:200004982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"moonbirds.with-winting.com",nocase; classtype:attempted-recon; sid:200004983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"morning-glitter-2e87.filedownjs.workers.dev",nocase; classtype:attempted-recon; sid:200004984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mortifiedorangepixels.0nlinegalicia.repl.co",nocase; classtype:attempted-recon; sid:200004985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"moveislojinha-app.blogspot.com",nocase; classtype:attempted-recon; sid:200004986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"moverselectronics.com",nocase; classtype:attempted-recon; sid:200004987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mp-logincliente.siteprofissional.com",nocase; classtype:attempted-recon; sid:200004988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mpbirdcontrol.qc.ca",nocase; classtype:attempted-recon; sid:200004989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mpsienaprotezionefrodi.com",nocase; classtype:attempted-recon; sid:200004990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mpsienaserviziostorno.com",nocase; classtype:attempted-recon; sid:200004991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mq4a2-wyaaa-aaaad-qdpcq-cai.raw.ic0.app",nocase; classtype:attempted-recon; sid:200004992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mqluggdwqd.duckdns.org",nocase; classtype:attempted-recon; sid:200004993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mqvudeotcf.duckdns.org",nocase; classtype:attempted-recon; sid:200004994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mrdon.myportfolio.com",nocase; classtype:attempted-recon; sid:200004995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"msc-doelsach.at",nocase; classtype:attempted-recon; sid:200004996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscxuenavd.duckdns.org",nocase; classtype:attempted-recon; sid:200004997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"msn-security-project.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"msn-security-project.web.app",nocase; classtype:attempted-recon; sid:200004999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"msofficemessagescenter-1.mfs.gg",nocase; classtype:attempted-recon; sid:200005000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"msvtfiplgb.duckdns.org",nocase; classtype:attempted-recon; sid:200005001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mt-bank.squizofriend.com",nocase; classtype:attempted-recon; sid:200005002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mt-e0a64.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mt-e0a64.web.app",nocase; classtype:attempted-recon; sid:200005004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mt-n7euu.ondigitalocean.app",nocase; classtype:attempted-recon; sid:200005005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mt-sec-b5cd4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mt07verify.com",nocase; classtype:attempted-recon; sid:200005007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mt3bver.com",nocase; classtype:attempted-recon; sid:200005008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtask-pr01.web.app",nocase; classtype:attempted-recon; sid:200005009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtb-247-sec00.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtb-247-sec00.web.app",nocase; classtype:attempted-recon; sid:200005011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtb01verify.com",nocase; classtype:attempted-recon; sid:200005012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtbankverify3.sytes.net",nocase; classtype:attempted-recon; sid:200005013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtbfix1secure.com",nocase; classtype:attempted-recon; sid:200005014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtbinfosecure.com",nocase; classtype:attempted-recon; sid:200005015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtbsecure1fix.com",nocase; classtype:attempted-recon; sid:200005016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtbsecurebank.duckdns.org",nocase; classtype:attempted-recon; sid:200005017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtbtranserror.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtbtranserror.web.app",nocase; classtype:attempted-recon; sid:200005019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtmsk-wlt.mystrikingly.com",nocase; classtype:attempted-recon; sid:200005020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtrsteel.com",nocase; classtype:attempted-recon; sid:200005021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mturkiyegovtr-aidat-iade-hizli.tk",nocase; classtype:attempted-recon; sid:200005022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtvngcdvsp.duckdns.org",nocase; classtype:attempted-recon; sid:200005023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mub.me",nocase; classtype:attempted-recon; sid:200005024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mudd.marpuasanotice.workers.dev",nocase; classtype:attempted-recon; sid:200005025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"muddy-ayya.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200005026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"muddy-breezers.p1woqbnm.workers.dev",nocase; classtype:attempted-recon; sid:200005027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"muddy-dawn-b613.sharepoinx.workers.dev",nocase; classtype:attempted-recon; sid:200005028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mueslisvvap.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mueslisvvap.web.app",nocase; classtype:attempted-recon; sid:200005030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mufj-card.qeeyrvo.cn",nocase; classtype:attempted-recon; sid:200005031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mukioposa.co.vu",nocase; classtype:attempted-recon; sid:200005032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"multi-coinpad.org",nocase; classtype:attempted-recon; sid:200005033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"multibankweb.com",nocase; classtype:attempted-recon; sid:200005034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"multichainconnections.org",nocase; classtype:attempted-recon; sid:200005035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"multiwalletconnectbot.com",nocase; classtype:attempted-recon; sid:200005036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mumsturn.com",nocase; classtype:attempted-recon; sid:200005037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mundomelhor.gq",nocase; classtype:attempted-recon; sid:200005038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"muniporoy.gob.pe",nocase; classtype:attempted-recon; sid:200005039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"murlidharrope.com",nocase; classtype:attempted-recon; sid:200005040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"murvraycwc.duckdns.org",nocase; classtype:attempted-recon; sid:200005041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mushyutterserver.procedbrou.repl.co",nocase; classtype:attempted-recon; sid:200005042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mvcas.com",nocase; classtype:attempted-recon; sid:200005043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mvellolandingpage.azurewebsites.net",nocase; classtype:attempted-recon; sid:200005044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mx5go-3aaaa-aaaad-qdpca-cai.raw.ic0.app",nocase; classtype:attempted-recon; sid:200005045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mxkrczrhbr.duckdns.org",nocase; classtype:attempted-recon; sid:200005046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mxrr.com",nocase; classtype:attempted-recon; sid:200005047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-account-orange.com",nocase; classtype:attempted-recon; sid:200005048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-arnazno-prime6-singin6.workers.dev",nocase; classtype:attempted-recon; sid:200005049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-bithumb.web.app",nocase; classtype:attempted-recon; sid:200005050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-gmail.ir",nocase; classtype:attempted-recon; sid:200005051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-site-107074-106586.weeblysite.com",nocase; classtype:attempted-recon; sid:200005052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-site-silahkan-konfirmas-akun-anda088.weeblysite.com",nocase; classtype:attempted-recon; sid:200005053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-story-instagram.duckdns.org",nocase; classtype:attempted-recon; sid:200005054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-ts3card-com.anwaymall.com",nocase; classtype:attempted-recon; sid:200005055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.heyform.net",nocase; classtype:attempted-recon; sid:200005056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.netteveri.com",nocase; classtype:attempted-recon; sid:200005057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myappbtsecurebusiness.github.io",nocase; classtype:attempted-recon; sid:200005058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mybilling.dynv6.net",nocase; classtype:attempted-recon; sid:200005059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mybroadband7140002.github.io",nocase; classtype:attempted-recon; sid:200005060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mycuriousbrain.com",nocase; classtype:attempted-recon; sid:200005061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mydappswalletconnect.com",nocase; classtype:attempted-recon; sid:200005062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mydooog.com",nocase; classtype:attempted-recon; sid:200005063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myee-secure-login.com",nocase; classtype:attempted-recon; sid:200005064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myee-support-id.com",nocase; classtype:attempted-recon; sid:200005065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myentcu.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myentcu.web.app",nocase; classtype:attempted-recon; sid:200005067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myetherwallet-app.com",nocase; classtype:attempted-recon; sid:200005068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myiccu.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myiccu.web.app",nocase; classtype:attempted-recon; sid:200005070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacasecsoeb.myjacocaasoeb.yingjikuaijie2.net",nocase; classtype:attempted-recon; sid:200005071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacasecsoeb.myjacoccaasoeb.6997887.xyz",nocase; classtype:attempted-recon; sid:200005072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacasesoeb.myjaccoasoeb.rolling41.xyz",nocase; classtype:attempted-recon; sid:200005073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacseasoeb.myjaccasoeb.axs.link",nocase; classtype:attempted-recon; sid:200005074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacseasoeb.myjacccasoeb.diot.top",nocase; classtype:attempted-recon; sid:200005075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacseooeb.myjaoseeseb.sqltjt.top",nocase; classtype:attempted-recon; sid:200005076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaiocseooeb.myijaocseeseb.mgjuxa.top",nocase; classtype:attempted-recon; sid:200005077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaiocseooeb.myijaocseeseb.mizduc.top",nocase; classtype:attempted-recon; sid:200005078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaiocseooeb.myijaocseeseb.ttvjrg.top",nocase; classtype:attempted-recon; sid:200005079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaioscseooeb.miyejcaoseeseb.phpump.top",nocase; classtype:attempted-recon; sid:200005080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaioscseooeb.miyejcaoseeseb.rpuhhh.top",nocase; classtype:attempted-recon; sid:200005081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaioscseooeb.miyejcaoseeseb.rrbbvy.top",nocase; classtype:attempted-recon; sid:200005082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaocseooeb.myjaocseeseb.mizduc.top",nocase; classtype:attempted-recon; sid:200005083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaocseooeb.myjaocseeseb.mojnlk.top",nocase; classtype:attempted-recon; sid:200005084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaocseooeb.myjaocseeseb.uuyzgv.top",nocase; classtype:attempted-recon; sid:200005085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaoscseooeb.myejcaoseeseb.otwkez.top",nocase; classtype:attempted-recon; sid:200005086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaoscseooeb.myejcaoseeseb.oznolj.top",nocase; classtype:attempted-recon; sid:200005087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaoscseooeb.myejcaoseeseb.pdyqrl.top",nocase; classtype:attempted-recon; sid:200005088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaoscseooeb.myejcaoseeseb.upnpqx.top",nocase; classtype:attempted-recon; sid:200005089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascesoccsaaseseb.mseycceaoojearescoooseaascsoeb.rinlvb.top",nocase; classtype:attempted-recon; sid:200005090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascesoccsaaseseb.mseycceaoojearescoooseacsoeb.rinlvb.top",nocase; classtype:attempted-recon; sid:200005091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascesoccsaaseseb.mseyjcaaaosearescooosecsoeb.rinlvb.top",nocase; classtype:attempted-recon; sid:200005092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascesoccsaaseseb.mseyjcaacosearescoooseccsooeb.rinlvb.top",nocase; classtype:attempted-recon; sid:200005093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascesoccsaaseseb.mseyjcaacosearescoooseoeb.rinlvb.top",nocase; classtype:attempted-recon; sid:200005094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascesoccsaaseseb.mseyjcaacosearescoooseoeb.sswfzk.top",nocase; classtype:attempted-recon; sid:200005095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascoseb.myjaasccsocsoeb.2354387.xyz",nocase; classtype:attempted-recon; sid:200005096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascoseb.myjaascsoeb.4566878.xyz",nocase; classtype:attempted-recon; sid:200005097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascoseb.myjacsccsooeb.ojpih.top",nocase; classtype:attempted-recon; sid:200005098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascoseb.myjacsoeb.4566368.xyz",nocase; classtype:attempted-recon; sid:200005099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascseooeb.myejaoseeseb.mstcly.top",nocase; classtype:attempted-recon; sid:200005100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascseooeb.myejaoseeseb.qdzxsq.top",nocase; classtype:attempted-recon; sid:200005101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcb.serve-jp.cf",nocase; classtype:attempted-recon; sid:200005102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcbeovivcsowisuv.eanisgiosm.odujie.za.com",nocase; classtype:attempted-recon; sid:200005103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcbeovnvcsowis.oeangsm.mcxugn.za.com",nocase; classtype:attempted-recon; sid:200005104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcbeovnvcsowis.uvcoeangsmio.bnywlu.za.com",nocase; classtype:attempted-recon; sid:200005105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcbeovnvcsowis.uvcoeangsmio.pqyvgi.za.com",nocase; classtype:attempted-recon; sid:200005106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcbevsivsvnvcsuvowis.seioazgrsngsm.bbzbtx.za.com",nocase; classtype:attempted-recon; sid:200005107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcbevsivsvnvcsuvowis.seioazgrsngsm.lquolu.za.com",nocase; classtype:attempted-recon; sid:200005108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcbevssivsvnvcsowis.oeazgrsngsm.koxgxs.za.com",nocase; classtype:attempted-recon; sid:200005109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcbevssivsvnvcsuvcowis.oeioazgrsngsm.cbwqrw.za.com",nocase; classtype:attempted-recon; sid:200005110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcbevssivsvnvcsuvcowis.oeioazgrsngsm.ymsvdh.za.com",nocase; classtype:attempted-recon; sid:200005111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcbevssivsvvivcsowis.eazgrsnisgsm.jrvbcm.za.com",nocase; classtype:attempted-recon; sid:200005112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcbevssivsvvivcsowis.eazgrsnisgsm.phkavb.za.com",nocase; classtype:attempted-recon; sid:200005113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcbevssvocnvnvcsowis.oeeaseazrsngm.dvqcit.za.com",nocase; classtype:attempted-recon; sid:200005114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcbevssvocnvnvcsuvcowisease.oioazrsngsm.gzauog.za.com",nocase; classtype:attempted-recon; sid:200005115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcbevssvocnvnvcsuvcowisease.oioazrsngsm.odujie.za.com",nocase; classtype:attempted-recon; sid:200005116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcbevssvocnvvivcsowis.eeaseazrsnigsm.hchaca.za.com",nocase; classtype:attempted-recon; sid:200005117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcbevssvocnvvivcuvcsowieases.ioazrsnisgsm.lvpxrb.za.com",nocase; classtype:attempted-recon; sid:200005118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjeacsceooesb.moyjeasocseeseb.gzfmft.top",nocase; classtype:attempted-recon; sid:200005119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjeasccseooseb.omyeesjcaoseeseb.gnpais.top",nocase; classtype:attempted-recon; sid:200005120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjeasccseooseb.omyeesjcaoseeseb.gzfmft.top",nocase; classtype:attempted-recon; sid:200005121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjeeceae.cseeaoroseoeemr.yieojosaicencseseescceesoerebas.hhyc.com.cn",nocase; classtype:attempted-recon; sid:200005122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjeeseosiaecsrceooceseb.ieomsocenyaseocjeuaoccesoesocseeseb.jbhi.co",nocase; classtype:attempted-recon; sid:200005123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjeeseosiaeocrcseocoseebieo.socenmaseocyeujoccesoesacocseeseb.hbev.co",nocase; classtype:attempted-recon; sid:200005124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjeeseosiaeocrcseocoseebieo.socenmaseocyeujoccesoesacocseeseb.katr.co",nocase; classtype:attempted-recon; sid:200005125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjeeseosiaescrcseocoseebieo.socenmaseocyeueoccesoesjcaoseeseb.2sol.co",nocase; classtype:attempted-recon; sid:200005126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjeeseosiaescrcseocoseebieo.socenmaseocyeueoccesoesjcaoseeseb.gwdg.co",nocase; classtype:attempted-recon; sid:200005127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjeeseosiaescrcseocoseebieo.socenmaseocyeueoccesoesjcaoseeseb.ytgs.co",nocase; classtype:attempted-recon; sid:200005128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mymonero.refid556.com",nocase; classtype:attempted-recon; sid:200005129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mymweb-owner.at.ua",nocase; classtype:attempted-recon; sid:200005130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mynzsjh.top",nocase; classtype:attempted-recon; sid:200005131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myoffice365oauth.elementor.cloud",nocase; classtype:attempted-recon; sid:200005132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myomahahi.com",nocase; classtype:attempted-recon; sid:200005133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myorange.orangemali.com",nocase; classtype:attempted-recon; sid:200005134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mypayslip.sutherlandglobal.cm",nocase; classtype:attempted-recon; sid:200005135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myshedbuilder.com",nocase; classtype:attempted-recon; sid:200005136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mytheamsauthecent.wapgem.com",nocase; classtype:attempted-recon; sid:200005137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mytoshop.com",nocase; classtype:attempted-recon; sid:200005138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mzuoasvlgt.duckdns.org",nocase; classtype:attempted-recon; sid:200005139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"n-ver.unaux.com",nocase; classtype:attempted-recon; sid:200005140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"na.mims.cheeseconnoisseur.ca",nocase; classtype:attempted-recon; sid:200005141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nab-alert.mobi",nocase; classtype:attempted-recon; sid:200005142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nab-getaway.com",nocase; classtype:attempted-recon; sid:200005143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nab-www.303.si",nocase; classtype:attempted-recon; sid:200005144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nabankonline.com",nocase; classtype:attempted-recon; sid:200005145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nacion4lcosrica.webcindario.com",nocase; classtype:attempted-recon; sid:200005146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nacionabncrclo.webcindario.com",nocase; classtype:attempted-recon; sid:200005147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nacional0998.webcindario.com",nocase; classtype:attempted-recon; sid:200005148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nacionalbanco077.webcindario.com",nocase; classtype:attempted-recon; sid:200005149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nacionbank908878.webcindario.com",nocase; classtype:attempted-recon; sid:200005150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nacionelbaan.webcindario.com",nocase; classtype:attempted-recon; sid:200005151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"naciwebder.webcindario.com",nocase; classtype:attempted-recon; sid:200005152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nadyjtmiwz.duckdns.org",nocase; classtype:attempted-recon; sid:200005153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"najboljeuslugezavas.betterservicesforyou.com",nocase; classtype:attempted-recon; sid:200005154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"namele.marpuasabentar.workers.dev",nocase; classtype:attempted-recon; sid:200005155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"namelessajaa.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200005156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"namelesstr.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200005157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nanation.org.ru",nocase; classtype:attempted-recon; sid:200005158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nano.webcindario.com",nocase; classtype:attempted-recon; sid:200005159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"naomi0042.github.io",nocase; classtype:attempted-recon; sid:200005160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"napffx5.com",nocase; classtype:attempted-recon; sid:200005161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"narabeautyusa.com",nocase; classtype:attempted-recon; sid:200005162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nascimentoadvg.com",nocase; classtype:attempted-recon; sid:200005163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nasdaqet.com",nocase; classtype:attempted-recon; sid:200005164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nastyprofiles.ru",nocase; classtype:attempted-recon; sid:200005165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nat1onalbr.webcindario.com",nocase; classtype:attempted-recon; sid:200005166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nataliedombois.de",nocase; classtype:attempted-recon; sid:200005167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"natalsafety.com.br",nocase; classtype:attempted-recon; sid:200005168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nationalbank.webcindario.com",nocase; classtype:attempted-recon; sid:200005169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nattynetworks.com",nocase; classtype:attempted-recon; sid:200005170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"naturalimpishtests.galicwwbbcawpoe.repl.co",nocase; classtype:attempted-recon; sid:200005171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"naturhouse.sk",nocase; classtype:attempted-recon; sid:200005172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi-amfc.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi-amfc.web.app",nocase; classtype:attempted-recon; sid:200005174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi-drops.ru",nocase; classtype:attempted-recon; sid:200005175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi10.com",nocase; classtype:attempted-recon; sid:200005176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi12.com",nocase; classtype:attempted-recon; sid:200005177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi17.com",nocase; classtype:attempted-recon; sid:200005178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi2.net",nocase; classtype:attempted-recon; sid:200005179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi25.com",nocase; classtype:attempted-recon; sid:200005180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi30.com",nocase; classtype:attempted-recon; sid:200005181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi31.com",nocase; classtype:attempted-recon; sid:200005182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi41.com",nocase; classtype:attempted-recon; sid:200005183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi44.com",nocase; classtype:attempted-recon; sid:200005184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi51.com",nocase; classtype:attempted-recon; sid:200005185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi57.com",nocase; classtype:attempted-recon; sid:200005186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi9.com",nocase; classtype:attempted-recon; sid:200005187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navivincere.cc",nocase; classtype:attempted-recon; sid:200005188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nayanielectronics.com",nocase; classtype:attempted-recon; sid:200005189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nc-viralhijap.duckdns.org",nocase; classtype:attempted-recon; sid:200005190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nddbowdhpv.duckdns.org",nocase; classtype:attempted-recon; sid:200005191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ndeflawtechnologies.com",nocase; classtype:attempted-recon; sid:200005192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ndjvvxlfhb.duckdns.org",nocase; classtype:attempted-recon; sid:200005193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ne12bradnetempresabribpj.site",nocase; classtype:attempted-recon; sid:200005194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"near-waltets.autopartsmaroc.com",nocase; classtype:attempted-recon; sid:200005195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"necessaryimmaterialhypotenuse.peaorpeaoip.repl.co",nocase; classtype:attempted-recon; sid:200005196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"necessitymag.com",nocase; classtype:attempted-recon; sid:200005197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"necudneflirty.com",nocase; classtype:attempted-recon; sid:200005198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nedbankqa.flowblocks.com",nocase; classtype:attempted-recon; sid:200005199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"neivaecosta.adv.br",nocase; classtype:attempted-recon; sid:200005200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nejwtptpgm.duckdns.org",nocase; classtype:attempted-recon; sid:200005201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nelymikyss-com.preview-domain.com",nocase; classtype:attempted-recon; sid:200005202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nerestera.onrender.com",nocase; classtype:attempted-recon; sid:200005203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netbank.netbank.repl.co",nocase; classtype:attempted-recon; sid:200005204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netflix-tv.cf",nocase; classtype:attempted-recon; sid:200005205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netflixguiltless-guide.surge.sh",nocase; classtype:attempted-recon; sid:200005206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netflxalert.com",nocase; classtype:attempted-recon; sid:200005207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netguru.net.in",nocase; classtype:attempted-recon; sid:200005208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netwalletauth.com",nocase; classtype:attempted-recon; sid:200005209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"network-solutions-39317.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"network-solutions-60c51.web.app",nocase; classtype:attempted-recon; sid:200005211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"networksolutions-fd.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"networksolutions-fd.web.app",nocase; classtype:attempted-recon; sid:200005213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"neversencommun.fr",nocase; classtype:attempted-recon; sid:200005214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"new-eventsup.ml",nocase; classtype:attempted-recon; sid:200005215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"new-recruitmentevents.ml",nocase; classtype:attempted-recon; sid:200005216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newafricaresources.reefhotelkenya.com",nocase; classtype:attempted-recon; sid:200005217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newbhqsaka.duckdns.org",nocase; classtype:attempted-recon; sid:200005218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newhopemakassar.co.id",nocase; classtype:attempted-recon; sid:200005219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newlink-popup-smart.biglink.to",nocase; classtype:attempted-recon; sid:200005220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newmont.com",nocase; classtype:attempted-recon; sid:200005221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newrfp-construction.myportfolio.com",nocase; classtype:attempted-recon; sid:200005222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newrfp-hcarch.myportfolio.com",nocase; classtype:attempted-recon; sid:200005223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"news-4-san-antonio.partscyprus.com",nocase; classtype:attempted-recon; sid:200005224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newsaya.com",nocase; classtype:attempted-recon; sid:200005225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newtondancecompany.com",nocase; classtype:attempted-recon; sid:200005226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newty.rf.gd",nocase; classtype:attempted-recon; sid:200005227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newupdatonline-com.preview-domain.com",nocase; classtype:attempted-recon; sid:200005228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newzzadamss.buzz",nocase; classtype:attempted-recon; sid:200005229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nex5l-kyaaa-aaaad-qddlq-cai.ic.fleek.co",nocase; classtype:attempted-recon; sid:200005230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nexoinmobiliario.pe",nocase; classtype:attempted-recon; sid:200005231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nfgf.ncqrmyy.cn",nocase; classtype:attempted-recon; sid:200005232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nfgjn.gjiutie.cn",nocase; classtype:attempted-recon; sid:200005233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nfh.flxrmyy.cn",nocase; classtype:attempted-recon; sid:200005234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nfhrozwsce.duckdns.org",nocase; classtype:attempted-recon; sid:200005235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nfnfn.jtxzyy.cn",nocase; classtype:attempted-recon; sid:200005236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nftio.online",nocase; classtype:attempted-recon; sid:200005237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nftracking.io",nocase; classtype:attempted-recon; sid:200005238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nfts-pro.net",nocase; classtype:attempted-recon; sid:200005239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nftupdate.pages.dev",nocase; classtype:attempted-recon; sid:200005240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nfuupoepiu.duckdns.org",nocase; classtype:attempted-recon; sid:200005241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nfwyx3.blvvb.tech625.com",nocase; classtype:attempted-recon; sid:200005242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nfzuqvjgcu.duckdns.org",nocase; classtype:attempted-recon; sid:200005243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ng4a6ida.dreamwp.com",nocase; classtype:attempted-recon; sid:200005244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ngbnyoqmub.duckdns.org",nocase; classtype:attempted-recon; sid:200005245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ngfnf.adhbokj.cn",nocase; classtype:attempted-recon; sid:200005246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ngsmartrp.com",nocase; classtype:attempted-recon; sid:200005247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhacchuong.net",nocase; classtype:attempted-recon; sid:200005248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhattinsteel.com",nocase; classtype:attempted-recon; sid:200005249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhk.plus.hapleurerf.shop",nocase; classtype:attempted-recon; sid:200005250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhnh.hfszyy.cn",nocase; classtype:attempted-recon; sid:200005251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhsapply-covid-pass.com",nocase; classtype:attempted-recon; sid:200005252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhsfdhyubzsxyu.hostfree.pw",nocase; classtype:attempted-recon; sid:200005253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhukvltvbr.web.app",nocase; classtype:attempted-recon; sid:200005254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"niagarapower.com",nocase; classtype:attempted-recon; sid:200005255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nic-in-8d89d.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nic-in-b9c2b.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nicepriceoffice.nl",nocase; classtype:attempted-recon; sid:200005258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nicoleaction.com",nocase; classtype:attempted-recon; sid:200005259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nicoledruschnewitz.clickfunnels.com",nocase; classtype:attempted-recon; sid:200005260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nieuwpoortbe.godaddysites.com",nocase; classtype:attempted-recon; sid:200005261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nighkclick.biz",nocase; classtype:attempted-recon; sid:200005262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nikfddrmwj.duckdns.org",nocase; classtype:attempted-recon; sid:200005263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nikkibeautysalon.com",nocase; classtype:attempted-recon; sid:200005264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nikkofarmer.com",nocase; classtype:attempted-recon; sid:200005265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nistrastars.ga",nocase; classtype:attempted-recon; sid:200005266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nitro.neeve.co",nocase; classtype:attempted-recon; sid:200005267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nizotchauffage.bilty.be",nocase; classtype:attempted-recon; sid:200005268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nj58qz.hyperphp.com",nocase; classtype:attempted-recon; sid:200005269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nlrxh5.webwave.dev",nocase; classtype:attempted-recon; sid:200005270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nlyfafhbzf.duckdns.org",nocase; classtype:attempted-recon; sid:200005271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nmrefrigeration.com",nocase; classtype:attempted-recon; sid:200005272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nmtwcngtjt.duckdns.org",nocase; classtype:attempted-recon; sid:200005273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nmwcfkwqdn.duckdns.org",nocase; classtype:attempted-recon; sid:200005274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nna.asiaconnect.bdren.net.bd",nocase; classtype:attempted-recon; sid:200005275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nnbxqeolal.duckdns.org",nocase; classtype:attempted-recon; sid:200005276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nnnnmrqdrq.duckdns.org",nocase; classtype:attempted-recon; sid:200005277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nnqavbgywc.duckdns.org",nocase; classtype:attempted-recon; sid:200005278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"no-reply-b94a2b.ingress-comporellon.ewp.live",nocase; classtype:attempted-recon; sid:200005279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"no-reply-mailbox-co-kr-setting.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"noblea.com",nocase; classtype:attempted-recon; sid:200005281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nodemoh-31651.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nodemoh-31651.web.app",nocase; classtype:attempted-recon; sid:200005283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nodesauths.com",nocase; classtype:attempted-recon; sid:200005284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"noisy-cake-47d3.nh29901021139.workers.dev",nocase; classtype:attempted-recon; sid:200005285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"noisy-wildflower-6765.on.fleek.co",nocase; classtype:attempted-recon; sid:200005286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"none-of-his-present.my.id",nocase; classtype:attempted-recon; sid:200005287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nonprofitnetworkofindia.com",nocase; classtype:attempted-recon; sid:200005288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nordaelogg.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nordaelogg.web.app",nocase; classtype:attempted-recon; sid:200005290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nordiadata.com",nocase; classtype:attempted-recon; sid:200005291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"normalangstonrealestate.com",nocase; classtype:attempted-recon; sid:200005292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nosposte458d.yolasite.com",nocase; classtype:attempted-recon; sid:200005293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nossas-solucoes-agora.com",nocase; classtype:attempted-recon; sid:200005294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nosvhslevy.duckdns.org",nocase; classtype:attempted-recon; sid:200005295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notife.help.institutepages.workers.dev",nocase; classtype:attempted-recon; sid:200005296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notificatiervicesatt.square.site",nocase; classtype:attempted-recon; sid:200005297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notification-fb.secure-pages.workers.dev",nocase; classtype:attempted-recon; sid:200005298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notificationsbbuatest.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notificationsbbuatest.web.app",nocase; classtype:attempted-recon; sid:200005300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notificationservicefrances.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notificationservicefrances.web.app",nocase; classtype:attempted-recon; sid:200005302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notify-me.link",nocase; classtype:attempted-recon; sid:200005303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notifyv2migrateddssfsss.net",nocase; classtype:attempted-recon; sid:200005304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nour-ala-nour.com",nocase; classtype:attempted-recon; sid:200005305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nourayatravel.com",nocase; classtype:attempted-recon; sid:200005306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nouvellefonctionnalitorange.podia.com",nocase; classtype:attempted-recon; sid:200005307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"novelbogussoftwaresuite.lmlh4.repl.co",nocase; classtype:attempted-recon; sid:200005308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nox3-b4cc2d.ingress-bonde.ewp.live",nocase; classtype:attempted-recon; sid:200005309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"np.bb0n.cheeseconnoisseur.ca",nocase; classtype:attempted-recon; sid:200005310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"npdvonymre.duckdns.org",nocase; classtype:attempted-recon; sid:200005311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"npjlzfwnhq.duckdns.org",nocase; classtype:attempted-recon; sid:200005312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nprgrjlmel.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nprgrjlmel.web.app",nocase; classtype:attempted-recon; sid:200005314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nrmnefmyrd.duckdns.org",nocase; classtype:attempted-recon; sid:200005315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nroedreamcare.com",nocase; classtype:attempted-recon; sid:200005316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nsrmyy.cn",nocase; classtype:attempted-recon; sid:200005317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nswrlohirw.duckdns.org",nocase; classtype:attempted-recon; sid:200005318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nt.embluemail.com",nocase; classtype:attempted-recon; sid:200005319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ntfaccount-b83bd3.ingress-earth.ewp.live",nocase; classtype:attempted-recon; sid:200005320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nucleoresultado.com",nocase; classtype:attempted-recon; sid:200005321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nuemprestimo.com",nocase; classtype:attempted-recon; sid:200005322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nuevo-tuya-2.hostfree.pw",nocase; classtype:attempted-recon; sid:200005323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nuevoo365tuya.hostfree.pw",nocase; classtype:attempted-recon; sid:200005324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nuevoo365tuyya14.hostfree.pw",nocase; classtype:attempted-recon; sid:200005325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nuevosdatosgali.c1.biz",nocase; classtype:attempted-recon; sid:200005326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nuevosestudi324.webcindario.com",nocase; classtype:attempted-recon; sid:200005327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nuncorehits.web.app",nocase; classtype:attempted-recon; sid:200005328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nvcsse.com",nocase; classtype:attempted-recon; sid:200005329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nvidia1651665403.zendesk.com",nocase; classtype:attempted-recon; sid:200005330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nvmuubdrmn.duckdns.org",nocase; classtype:attempted-recon; sid:200005331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nwcase.com",nocase; classtype:attempted-recon; sid:200005332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nwss419.top",nocase; classtype:attempted-recon; sid:200005333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nx78474.repl.co",nocase; classtype:attempted-recon; sid:200005334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nxl58s.hyperphp.com",nocase; classtype:attempted-recon; sid:200005335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nycdmycqmn.duckdns.org",nocase; classtype:attempted-recon; sid:200005336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nydig.investready.com",nocase; classtype:attempted-recon; sid:200005337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nyestriasztas.hu",nocase; classtype:attempted-recon; sid:200005338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nyiksaulekel.66ghz.com",nocase; classtype:attempted-recon; sid:200005339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nymo.ee",nocase; classtype:attempted-recon; sid:200005340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nysestarts.com",nocase; classtype:attempted-recon; sid:200005341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nysethkpd.com",nocase; classtype:attempted-recon; sid:200005342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nzrurtbkpn.duckdns.org",nocase; classtype:attempted-recon; sid:200005343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oasisworkz.com",nocase; classtype:attempted-recon; sid:200005344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oazzmbcubo.duckdns.org",nocase; classtype:attempted-recon; sid:200005345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"obejdgj20.d208ai8leta6q5.amplifyapp.com",nocase; classtype:attempted-recon; sid:200005346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"observinglife.net",nocase; classtype:attempted-recon; sid:200005347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"obtenloahoramismoaqui.sylejmanzogaj.com",nocase; classtype:attempted-recon; sid:200005348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"occasionalpristineprogrammer.informacionmsn.repl.co",nocase; classtype:attempted-recon; sid:200005349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oceefoe.cn",nocase; classtype:attempted-recon; sid:200005350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ocioturismogalicia.com",nocase; classtype:attempted-recon; sid:200005351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ocnewyork.net",nocase; classtype:attempted-recon; sid:200005352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ocodigoparaemagrecer.com.br",nocase; classtype:attempted-recon; sid:200005353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oconurcczt.duckdns.org",nocase; classtype:attempted-recon; sid:200005354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"odd-bonus-a725.wastemen.workers.dev",nocase; classtype:attempted-recon; sid:200005355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"odd-field-9e1d.microsft-docs-foecisayant.workers.dev",nocase; classtype:attempted-recon; sid:200005356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"odd-lake-a237.hvac.workers.dev",nocase; classtype:attempted-recon; sid:200005357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oddunhealthyvirtualmachine.bancolmbiadynam.repl.co",nocase; classtype:attempted-recon; sid:200005358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"odjnkjg.weeblysite.com",nocase; classtype:attempted-recon; sid:200005359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"odptwzzsti.duckdns.org",nocase; classtype:attempted-recon; sid:200005360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oea4t2.webwave.dev",nocase; classtype:attempted-recon; sid:200005361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oetwbxwrdd.duckdns.org",nocase; classtype:attempted-recon; sid:200005362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ofbfbfhhdbhdhd.weeblysite.com",nocase; classtype:attempted-recon; sid:200005363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oferta-smarttv-magazineluiza.com",nocase; classtype:attempted-recon; sid:200005364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ofertas.gob.mx.seminuevos.info",nocase; classtype:attempted-recon; sid:200005365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"offic4280692.sitebuilder.name.tools",nocase; classtype:attempted-recon; sid:200005366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office-filedesk.myportfolio.com",nocase; classtype:attempted-recon; sid:200005367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office-invauth13425.zeknotarzo.workers.dev",nocase; classtype:attempted-recon; sid:200005368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office-proofpoint-documents.myportfolio.com",nocase; classtype:attempted-recon; sid:200005369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office.outlook3.workers.dev",nocase; classtype:attempted-recon; sid:200005370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office.ways-status.workers.dev",nocase; classtype:attempted-recon; sid:200005371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office03039200323.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office03039200323.web.app",nocase; classtype:attempted-recon; sid:200005373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office1-16f69.web.app",nocase; classtype:attempted-recon; sid:200005374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office18bd41c4e27d01ca654ef485200a641cc381795dd3ee389f34900c690.softmail2.workers.dev",nocase; classtype:attempted-recon; sid:200005375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office1fbfbbb69e7a57899f2d31eb895f8b891fbfbbb69e7a57899f2d31eb8.nuzzo.workers.dev",nocase; classtype:attempted-recon; sid:200005376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office2ba26c936161df9a60ce20211f793266211c4e3be87fdae87bf4d3c4b.softmail3.workers.dev",nocase; classtype:attempted-recon; sid:200005377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office365-owa1657.microsoftteams.workers.dev",nocase; classtype:attempted-recon; sid:200005378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office365-owa6878.microsoftpublisher.workers.dev",nocase; classtype:attempted-recon; sid:200005379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office365-securedocs-onmic000000.myportfolio.com",nocase; classtype:attempted-recon; sid:200005380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office365.outlook5.workers.dev",nocase; classtype:attempted-recon; sid:200005381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office365dumc0med5cibcugnc7dkvci2qbmrzo72wkguova62vqkkcib.softmail1.workers.dev",nocase; classtype:attempted-recon; sid:200005382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office365fileshare.myportfolio.com",nocase; classtype:attempted-recon; sid:200005383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office365mail.myportfolio.com",nocase; classtype:attempted-recon; sid:200005384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office365onedrivestorage.myportfolio.com",nocase; classtype:attempted-recon; sid:200005385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office365projectmemo.myportfolio.com",nocase; classtype:attempted-recon; sid:200005386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office365xxxjhgxxxonedrivekjhjdggccx.myportfolio.com",nocase; classtype:attempted-recon; sid:200005387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office39283c79b6d239c952b821624b0e6a26c3383c79b6d239c952b821624.emailnow2.workers.dev",nocase; classtype:attempted-recon; sid:200005388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office56b37d9abc629a95a353b4753bea37a356b37d9abc629a95a353b4753.acceptance.workers.dev",nocase; classtype:attempted-recon; sid:200005389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office7be5d0cc7597185ea2b07c5d67ace2647be5d0cc7597185ea2b07c5d6.mailmicrosoft.workers.dev",nocase; classtype:attempted-recon; sid:200005390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office80f8a649b49eef411c04a82b3e39b85b80f8a649b49eef411c04aa8fd.onedriveoffice.workers.dev",nocase; classtype:attempted-recon; sid:200005391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office92860fc8359aa442dbbbd31cd358386492860fc8359aa442dbbbd31cd.microsoftdrives1.workers.dev",nocase; classtype:attempted-recon; sid:200005392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office949abb2585772ab51a8ad332f13989dcd5d5bb2585772ab51a8ad332f.abcsenderz.workers.dev",nocase; classtype:attempted-recon; sid:200005393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office95352e9ccf1b1b0027b683de66e337bb95352e9ccf1b1b0027b683de6.mcrosoftfilezs.workers.dev",nocase; classtype:attempted-recon; sid:200005394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officea71129dd3bfe53d70402d117d90b6b9ba71129dd3bfe53d70402d117d.softdrivez.workers.dev",nocase; classtype:attempted-recon; sid:200005395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeaf3038133032eec1406a08677e4e3152af3038133032eec1406a08677.mojylaw.workers.dev",nocase; classtype:attempted-recon; sid:200005396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officec53d59b9a7fa68faa8ac3e6fed0f7678c53d59b9a7fa68faa8ac3e6fe.cathykonnik.workers.dev",nocase; classtype:attempted-recon; sid:200005397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officedocssecured.pages.dev",nocase; classtype:attempted-recon; sid:200005398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officedrive204b23499ee682480a9d4fb5592dcf30c7b323499ee682480a9d.ondreivsds.workers.dev",nocase; classtype:attempted-recon; sid:200005399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officedrive671d943c66d43639ff504f6e8603b0d3637b943c66d43639ff50.offices365files.workers.dev",nocase; classtype:attempted-recon; sid:200005400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officedrive6860908c937775e0f58fe179754804126860908c937775e0f58f.onedrivesgf.workers.dev",nocase; classtype:attempted-recon; sid:200005401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officedrivef7848b1089c0b94ba05f0ee7a32b53dbf7848b1089c0b94ba05f.drivecheckmails.workers.dev",nocase; classtype:attempted-recon; sid:200005402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officedrivesxe85bdf3fb68145124c57c78d1f798930e85bdf3fb68145124c.sureonedrive.workers.dev",nocase; classtype:attempted-recon; sid:200005403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officee1b9da80a723c5f1dffe6c11ce4cffb9e1b9da80a723c5f1dffe6c11c.accceptance.workers.dev",nocase; classtype:attempted-recon; sid:200005404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officee421a8bc35722f5aa4bbc277404bf8bee421a8bc35722f5aa4bbc2774.officemicrosofte421a8bc35722f5aa4bbc277404bf8bee421a8bc35722f5a.workers.dev",nocase; classtype:attempted-recon; sid:200005405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeee.bubbleapps.io",nocase; classtype:attempted-recon; sid:200005406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officematsolutions.co.za",nocase; classtype:attempted-recon; sid:200005407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officemicrosoft4cc17ac0369d77b37b0126363c5a814f4cc17ac0369d77b3.sharepointsoft.workers.dev",nocase; classtype:attempted-recon; sid:200005408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeonedrive0449c492c4fd1eb2f9a68932d4b8e7ff0449c492c4fd1eb2f.mcrosoftfilez6879.workers.dev",nocase; classtype:attempted-recon; sid:200005409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeonedrive23b246dc1dc8470a919f50b6dd839dfb23b246dc1dc8470a9.offcedrives.workers.dev",nocase; classtype:attempted-recon; sid:200005410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeonedrive25ffed98fda6dd6c8d5c80834463490d25ffed98fda6dd6c8.microsoftz.workers.dev",nocase; classtype:attempted-recon; sid:200005411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeonedrive634e3a53e73e0036f30a04bf224dcf85634e3a53e73e0036f.microsoft1.workers.dev",nocase; classtype:attempted-recon; sid:200005412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeonedrive7259cb18c1bc44b8e9b415dd251dd4ce7259cb18c1bc44b8e.micromails.workers.dev",nocase; classtype:attempted-recon; sid:200005413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeonedrive7be1bfb0486de510b18632cad5938a287be1bfb0486de510b.paulboffice.workers.dev",nocase; classtype:attempted-recon; sid:200005414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeonedrive9cf9dd481ca05e2e7a7837abcf593ef6e37abcf593ef6e37a.mcrosoftfiles.workers.dev",nocase; classtype:attempted-recon; sid:200005415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeonedrivea3188350d116c56f4640139145cbca08a3188350d116c56f4.officepos.workers.dev",nocase; classtype:attempted-recon; sid:200005416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeonedriveaf5f5e5ad0794773bb4296155c18d99caf5f5e5ad0794773b.softofficex.workers.dev",nocase; classtype:attempted-recon; sid:200005417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeonedriveb7affd86aa6565d724aefba4b8dbea52b7affd86aa6565d72.officewi.workers.dev",nocase; classtype:attempted-recon; sid:200005418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeonedrivec34109e8baa4f981ff836aec31d86510c34109e8baa4f981f.softshare.workers.dev",nocase; classtype:attempted-recon; sid:200005419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeonedrivedb4a74607068611f61cd159e966ae78d53c319380101349d0.softmicromail1.workers.dev",nocase; classtype:attempted-recon; sid:200005420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeonedrivee376ca49c36aeb18a1926bb5d169739ce376ca49c36aeb18a.microsoftmails.workers.dev",nocase; classtype:attempted-recon; sid:200005421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeonedrives2e38ea393a11eb94bd1bc533816b19052e38ea3b19052e38.filemicrosoft1.workers.dev",nocase; classtype:attempted-recon; sid:200005422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeonline.manifo.com",nocase; classtype:attempted-recon; sid:200005423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeoutlookfdaa672a942961604a8cd3b0cb5247c2fdaa672a942961604a.abcsender.workers.dev",nocase; classtype:attempted-recon; sid:200005424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"offices160a0dfe952dc58d52babb813089b049160a0dfe952dc58d52babb81.officemails.workers.dev",nocase; classtype:attempted-recon; sid:200005425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"offices7b6ce136c0aad19d8d3ef2d19e7d8b515989e136c0aad19d8d3ef2d1.officesgm.workers.dev",nocase; classtype:attempted-recon; sid:200005426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officesc739fc24499a54ef81e2243e9d60c97fc739fc24499a54ef81e2243e.filesesecures.workers.dev",nocase; classtype:attempted-recon; sid:200005427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officialliker.co",nocase; classtype:attempted-recon; sid:200005428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"offre.streamlink.to",nocase; classtype:attempted-recon; sid:200005429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"offyourplate.my.idaptive.app",nocase; classtype:attempted-recon; sid:200005430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oficigaligali.urjalksdmis.repl.co",nocase; classtype:attempted-recon; sid:200005431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ofrikwlxmvlcaoidzvf-w-vdtaplftkdqnsefmsl-mqntrpxwpopjcvgwepb.glitch.me",nocase; classtype:attempted-recon; sid:200005432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ofsmgkdxey.duckdns.org",nocase; classtype:attempted-recon; sid:200005433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ogxlnylpny.duckdns.org",nocase; classtype:attempted-recon; sid:200005434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ohfi-innovationdepartment.web.app",nocase; classtype:attempted-recon; sid:200005435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ohw.tf",nocase; classtype:attempted-recon; sid:200005436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oifryzrfpj.duckdns.org",nocase; classtype:attempted-recon; sid:200005437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oigdpebdhj.duckdns.org",nocase; classtype:attempted-recon; sid:200005438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oirbczctyo.duckdns.org",nocase; classtype:attempted-recon; sid:200005439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oix-dostawapl.polndspaygs.pl",nocase; classtype:attempted-recon; sid:200005440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oixgiejo8596.liveblog365.com",nocase; classtype:attempted-recon; sid:200005441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oizrfvwqyz.duckdns.org",nocase; classtype:attempted-recon; sid:200005442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"okcphotoboothrental.com",nocase; classtype:attempted-recon; sid:200005443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"okdlxjg.top",nocase; classtype:attempted-recon; sid:200005444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"okeykknqgo.duckdns.org",nocase; classtype:attempted-recon; sid:200005445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"okjd6z.hyperphp.com",nocase; classtype:attempted-recon; sid:200005446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oklwzyuqms.duckdns.org",nocase; classtype:attempted-recon; sid:200005447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"okser2.com",nocase; classtype:attempted-recon; sid:200005448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"olabert.playcode.io",nocase; classtype:attempted-recon; sid:200005449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"old-file-surf-978b.theattdrops6111.workers.dev",nocase; classtype:attempted-recon; sid:200005450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"old.martobang.workers.dev",nocase; classtype:attempted-recon; sid:200005451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oliviwq.hyperphp.com",nocase; classtype:attempted-recon; sid:200005452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oluwarantinmialafia.godaddysites.com",nocase; classtype:attempted-recon; sid:200005453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"olx-pl-xhp.accept8145.me",nocase; classtype:attempted-recon; sid:200005454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omahashutters.com",nocase; classtype:attempted-recon; sid:200005455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omareturnian.com",nocase; classtype:attempted-recon; sid:200005456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omniafricashop.online",nocase; classtype:attempted-recon; sid:200005457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omrgroupitaliagiambelli.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omrgroupitaliagiambelli.web.app",nocase; classtype:attempted-recon; sid:200005459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"on-line-irs.dns04.com",nocase; classtype:attempted-recon; sid:200005460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive-shared.zineadiet.workers.dev",nocase; classtype:attempted-recon; sid:200005461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive.12075354539642.workers.dev",nocase; classtype:attempted-recon; sid:200005462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive.ama2on.workers.dev",nocase; classtype:attempted-recon; sid:200005463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive.dearkai.workers.dev",nocase; classtype:attempted-recon; sid:200005464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive.dpot.workers.dev",nocase; classtype:attempted-recon; sid:200005465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive.jennitai.workers.dev",nocase; classtype:attempted-recon; sid:200005466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive.lonelyminicat.workers.dev",nocase; classtype:attempted-recon; sid:200005467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive.lqbby.workers.dev",nocase; classtype:attempted-recon; sid:200005468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive.nmzl.workers.dev",nocase; classtype:attempted-recon; sid:200005469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive.potatoyang246.workers.dev",nocase; classtype:attempted-recon; sid:200005470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive.prprv.workers.dev",nocase; classtype:attempted-recon; sid:200005471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive.xu985795385.workers.dev",nocase; classtype:attempted-recon; sid:200005472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive.ziznah.workers.dev",nocase; classtype:attempted-recon; sid:200005473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrivee5.joejoe5.workers.dev",nocase; classtype:attempted-recon; sid:200005474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedriveoffice28432c5b1f27614986e6d114fb3cb70028432c5b1f2761498.checkonedrives.workers.dev",nocase; classtype:attempted-recon; sid:200005475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onee-a0488.web.app",nocase; classtype:attempted-recon; sid:200005476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oneone-19cd8.web.app",nocase; classtype:attempted-recon; sid:200005477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onescanner.web.app",nocase; classtype:attempted-recon; sid:200005478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onige.cm",nocase; classtype:attempted-recon; sid:200005479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-b0bc56.ingress-bonde.ewp.live",nocase; classtype:attempted-recon; sid:200005480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-banking.avisos.repl.co",nocase; classtype:attempted-recon; sid:200005481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-banking.supportbank.repl.co",nocase; classtype:attempted-recon; sid:200005482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-pdf-portal.visura.co",nocase; classtype:attempted-recon; sid:200005483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online.attservice.workers.dev",nocase; classtype:attempted-recon; sid:200005484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online.jpstrader.com",nocase; classtype:attempted-recon; sid:200005485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlineb.galiciahb.repl.co",nocase; classtype:attempted-recon; sid:200005486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinebanking.activarcuenta.repl.co",nocase; classtype:attempted-recon; sid:200005487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinebanking.informac.repl.co",nocase; classtype:attempted-recon; sid:200005488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinebanking.onilebanking.repl.co",nocase; classtype:attempted-recon; sid:200005489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinebankingbancogalicia.loginxx001.repl.co",nocase; classtype:attempted-recon; sid:200005490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinebg.homeg.repl.co",nocase; classtype:attempted-recon; sid:200005491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinebncoitau.x10.mx",nocase; classtype:attempted-recon; sid:200005492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinebncopyitau.x10.mx",nocase; classtype:attempted-recon; sid:200005493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlineec.onlineec.repl.co",nocase; classtype:attempted-recon; sid:200005494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinehomebnknggalicia.c1.biz",nocase; classtype:attempted-recon; sid:200005495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinehomee.repl.co",nocase; classtype:attempted-recon; sid:200005496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinencom.com",nocase; classtype:attempted-recon; sid:200005497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlineoffice365-owa5418.microsoftcertifications2022.workers.dev",nocase; classtype:attempted-recon; sid:200005498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinepromericagt.promericaonli.repl.co",nocase; classtype:attempted-recon; sid:200005499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlineshowerheads.com",nocase; classtype:attempted-recon; sid:200005500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlysportplus.com",nocase; classtype:attempted-recon; sid:200005501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onpointcu-n2.com",nocase; classtype:attempted-recon; sid:200005502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oooo4.godaddysites.com",nocase; classtype:attempted-recon; sid:200005503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ooooo1.godaddysites.com",nocase; classtype:attempted-recon; sid:200005504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opalescentsolutions.com",nocase; classtype:attempted-recon; sid:200005505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opaque-gorgeous-visitor.glitch.me",nocase; classtype:attempted-recon; sid:200005506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opdateringsrvc.com",nocase; classtype:attempted-recon; sid:200005507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opecalex.com",nocase; classtype:attempted-recon; sid:200005508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opeggk.com",nocase; classtype:attempted-recon; sid:200005509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"open-sea-a4fef.web.app",nocase; classtype:attempted-recon; sid:200005510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opence.dos-comm.ru",nocase; classtype:attempted-recon; sid:200005511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"openedl.org",nocase; classtype:attempted-recon; sid:200005512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opensea-help.com",nocase; classtype:attempted-recon; sid:200005513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opensea-lottery.com",nocase; classtype:attempted-recon; sid:200005514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opensea-support.rf.gd",nocase; classtype:attempted-recon; sid:200005515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opensea-tools.net",nocase; classtype:attempted-recon; sid:200005516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opensea.profilesetting.in",nocase; classtype:attempted-recon; sid:200005517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"openseaco.com",nocase; classtype:attempted-recon; sid:200005518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"openseal.shop",nocase; classtype:attempted-recon; sid:200005519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"openseaspps.com",nocase; classtype:attempted-recon; sid:200005520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opensee-marketplace.com",nocase; classtype:attempted-recon; sid:200005521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opensels.com",nocase; classtype:attempted-recon; sid:200005522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opera-n-n-n26-com.preview-domain.com",nocase; classtype:attempted-recon; sid:200005523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"operare-n-n-26-com.preview-domain.com",nocase; classtype:attempted-recon; sid:200005524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ophyqyhkdj.duckdns.org",nocase; classtype:attempted-recon; sid:200005525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opnsea-oo-login.mystrikingly.com",nocase; classtype:attempted-recon; sid:200005526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"optus-support.net",nocase; classtype:attempted-recon; sid:200005527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"optuselaretanestrace-b94c6f.ingress-comporellon.ewp.live",nocase; classtype:attempted-recon; sid:200005528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"optydistribution.ca",nocase; classtype:attempted-recon; sid:200005529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opxlpcgftx.duckdns.org",nocase; classtype:attempted-recon; sid:200005530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orabote.name",nocase; classtype:attempted-recon; sid:200005531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orange-darkness-4210.on.fleek.co",nocase; classtype:attempted-recon; sid:200005532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orange-security.cloud.coreoz.com",nocase; classtype:attempted-recon; sid:200005533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orange-thunder-1962.anyrag8021015.workers.dev",nocase; classtype:attempted-recon; sid:200005534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orange.epizy.com",nocase; classtype:attempted-recon; sid:200005535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orange.iobeya.com",nocase; classtype:attempted-recon; sid:200005536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orange.sphinxonline.net",nocase; classtype:attempted-recon; sid:200005537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orange.windagrande78.workers.dev",nocase; classtype:attempted-recon; sid:200005538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orangebank.mailerpage.io",nocase; classtype:attempted-recon; sid:200005539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orangess.contactin.bio",nocase; classtype:attempted-recon; sid:200005540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oranjempsnspeo.t.justns.ru",nocase; classtype:attempted-recon; sid:200005541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orcube-bf0cf.web.app",nocase; classtype:attempted-recon; sid:200005542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"order-98d9h.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orgclient.wonstasite.com",nocase; classtype:attempted-recon; sid:200005544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orie56hjhfn.club",nocase; classtype:attempted-recon; sid:200005545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"origin.axieinfinity.com",nocase; classtype:attempted-recon; sid:200005546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"originmirrors.com",nocase; classtype:attempted-recon; sid:200005547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ormantencs112.odoo.com",nocase; classtype:attempted-recon; sid:200005548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ornima.com",nocase; classtype:attempted-recon; sid:200005549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"os.filesusr.com",nocase; classtype:attempted-recon; sid:200005550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oscond.com",nocase; classtype:attempted-recon; sid:200005551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"osynclive-nds.info",nocase; classtype:attempted-recon; sid:200005552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"otdghqivce.duckdns.org",nocase; classtype:attempted-recon; sid:200005553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"otomoto-h229.net",nocase; classtype:attempted-recon; sid:200005554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"otomoto3452.com",nocase; classtype:attempted-recon; sid:200005555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"otpyzlwkbn.duckdns.org",nocase; classtype:attempted-recon; sid:200005556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ou1ook-maile-1d28.queri.workers.dev",nocase; classtype:attempted-recon; sid:200005557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ouest-isol-habitat.com",nocase; classtype:attempted-recon; sid:200005558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"our-a272e1.ingress-erytho.ewp.live",nocase; classtype:attempted-recon; sid:200005559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ourocardresgate.online",nocase; classtype:attempted-recon; sid:200005560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outletshein.cl",nocase; classtype:attempted-recon; sid:200005561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outlok.formaloo.net",nocase; classtype:attempted-recon; sid:200005562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outlook-cloud-document.weeblysite.com",nocase; classtype:attempted-recon; sid:200005563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outlook-protection.msaouthofficee.com",nocase; classtype:attempted-recon; sid:200005564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outlook1541489.webcindario.com",nocase; classtype:attempted-recon; sid:200005565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outlookadminsupport.softr.app",nocase; classtype:attempted-recon; sid:200005566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outlookonline.myportfolio.com",nocase; classtype:attempted-recon; sid:200005567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outlookowa.myportfolio.com",nocase; classtype:attempted-recon; sid:200005568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outlookowalive.myportfolio.com",nocase; classtype:attempted-recon; sid:200005569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outpulling.pl",nocase; classtype:attempted-recon; sid:200005570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ov-h-709f2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ov-h-709f2.web.app",nocase; classtype:attempted-recon; sid:200005572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"overjoyedfrankfiber.galiicliag.repl.co",nocase; classtype:attempted-recon; sid:200005573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"overloading.itsaol.com",nocase; classtype:attempted-recon; sid:200005574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ovh-cl0ud.web.app",nocase; classtype:attempted-recon; sid:200005575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ovh-dfh.web.app",nocase; classtype:attempted-recon; sid:200005576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ovh-link.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ovh-link.web.app",nocase; classtype:attempted-recon; sid:200005578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ovhh-0.web.app",nocase; classtype:attempted-recon; sid:200005579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ovhh-19f4a.web.app",nocase; classtype:attempted-recon; sid:200005580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"owamail29.auth5656.workers.dev",nocase; classtype:attempted-recon; sid:200005581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"owaweb3-6-5.mailauthorize.workers.dev",nocase; classtype:attempted-recon; sid:200005582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"owbhakd-b529d3.ingress-erytho.ewp.live",nocase; classtype:attempted-recon; sid:200005583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"owletroads.com",nocase; classtype:attempted-recon; sid:200005584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"owuunkqprp.duckdns.org",nocase; classtype:attempted-recon; sid:200005585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ox-0x3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oxbtki.webwave.dev",nocase; classtype:attempted-recon; sid:200005587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oybudyzdwu.duckdns.org",nocase; classtype:attempted-recon; sid:200005588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oyoshopbuisness.easy.co",nocase; classtype:attempted-recon; sid:200005589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ozboya.com",nocase; classtype:attempted-recon; sid:200005590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ozkvarrukd.duckdns.org",nocase; classtype:attempted-recon; sid:200005591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ozo.pages.dev",nocase; classtype:attempted-recon; sid:200005592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ozsrlcuskc.duckdns.org",nocase; classtype:attempted-recon; sid:200005593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p0landcd.web.app",nocase; classtype:attempted-recon; sid:200005594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p0lygon-php.blogspot.com",nocase; classtype:attempted-recon; sid:200005595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p1u3s-rnkh.tiaonuo.cn",nocase; classtype:attempted-recon; sid:200005596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p463ggeetimrecoveryidentitysafety.co.vu",nocase; classtype:attempted-recon; sid:200005597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p4g3serticerpages4safetyupdatessafety.co.vu",nocase; classtype:attempted-recon; sid:200005598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p4gec0munitystand4rtandpagerepairservicee.co.vu",nocase; classtype:attempted-recon; sid:200005599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pacificcapital.com",nocase; classtype:attempted-recon; sid:200005600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pacificointer.intermundo.repl.co",nocase; classtype:attempted-recon; sid:200005601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"package2021.blogspot.ba",nocase; classtype:attempted-recon; sid:200005602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"package2021.blogspot.bg",nocase; classtype:attempted-recon; sid:200005603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"package2021.blogspot.com",nocase; classtype:attempted-recon; sid:200005604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pad-b95a03.ingress-comporellon.ewp.live",nocase; classtype:attempted-recon; sid:200005605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"padedesign.com",nocase; classtype:attempted-recon; sid:200005606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"page-recovery-identity2022.com",nocase; classtype:attempted-recon; sid:200005607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"page.appmobilepages.workers.dev",nocase; classtype:attempted-recon; sid:200005608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pageconfirmation256467.co.vu",nocase; classtype:attempted-recon; sid:200005609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pageconfirmation617081.co.vu",nocase; classtype:attempted-recon; sid:200005610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pageidentity2022.com",nocase; classtype:attempted-recon; sid:200005611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagerecoveryidentity2.com",nocase; classtype:attempted-recon; sid:200005612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages-help-center.epizy.com",nocase; classtype:attempted-recon; sid:200005613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages-marvelous-project.webflow.io",nocase; classtype:attempted-recon; sid:200005614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages-protection-update-2022.me",nocase; classtype:attempted-recon; sid:200005615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages-protetions-updates2022.co",nocase; classtype:attempted-recon; sid:200005616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages.secure-accts.workers.dev",nocase; classtype:attempted-recon; sid:200005617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagesecureinformationsactisltysistem.co.vu",nocase; classtype:attempted-recon; sid:200005618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagesrecureinformationactivltyclients.co.vu",nocase; classtype:attempted-recon; sid:200005619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagessecureinformationsctivityrecover.co.vu",nocase; classtype:attempted-recon; sid:200005620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagessecurelnformationactivltysystem.co.vu",nocase; classtype:attempted-recon; sid:200005621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagesupportoffice2022.epizy.com",nocase; classtype:attempted-recon; sid:200005622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pageupdatesinformatiosaccou173333.co.vu",nocase; classtype:attempted-recon; sid:200005623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pageverifications.com",nocase; classtype:attempted-recon; sid:200005624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagosfreetuya.hostfree.pw",nocase; classtype:attempted-recon; sid:200005625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagssecurelnformationactivltysystem.co.vu",nocase; classtype:attempted-recon; sid:200005626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paidyloginco.buzz",nocase; classtype:attempted-recon; sid:200005627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paiementboncoin.com",nocase; classtype:attempted-recon; sid:200005628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paiementleboncoin3.wordservice.online",nocase; classtype:attempted-recon; sid:200005629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paket-secure.us11.instawp.xyz",nocase; classtype:attempted-recon; sid:200005630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paketinfo.myscriptcase.com",nocase; classtype:attempted-recon; sid:200005631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pakistantimes.com",nocase; classtype:attempted-recon; sid:200005632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"palegreenmoccasinsource.usastarbub.repl.co",nocase; classtype:attempted-recon; sid:200005633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"palewearablehypercard.332204.repl.co",nocase; classtype:attempted-recon; sid:200005634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paloform.net",nocase; classtype:attempted-recon; sid:200005635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancaekeswap.cloud",nocase; classtype:attempted-recon; sid:200005636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancake-swapp.com",nocase; classtype:attempted-recon; sid:200005637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancake7wop.com",nocase; classtype:attempted-recon; sid:200005638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakefinance-tokenpresale.com",nocase; classtype:attempted-recon; sid:200005639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakemobile.com",nocase; classtype:attempted-recon; sid:200005640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakesswaps.tech",nocase; classtype:attempted-recon; sid:200005641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakesswaps.us",nocase; classtype:attempted-recon; sid:200005642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakesvvap.financial",nocase; classtype:attempted-recon; sid:200005643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswa-p.com",nocase; classtype:attempted-recon; sid:200005644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap-home.github.io",nocase; classtype:attempted-recon; sid:200005645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap.diamondhandsnetwork.app",nocase; classtype:attempted-recon; sid:200005646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap.finance.tradechange.in",nocase; classtype:attempted-recon; sid:200005647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap.himotechglobal.com",nocase; classtype:attempted-recon; sid:200005648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap.men",nocase; classtype:attempted-recon; sid:200005649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap.migrate.finance",nocase; classtype:attempted-recon; sid:200005650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswapapp.com",nocase; classtype:attempted-recon; sid:200005651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswapmeta.biz",nocase; classtype:attempted-recon; sid:200005652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswapmeta.pro",nocase; classtype:attempted-recon; sid:200005653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswapmeta.win",nocase; classtype:attempted-recon; sid:200005654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswappshop.blogspot.com",nocase; classtype:attempted-recon; sid:200005655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswapsupport.co",nocase; classtype:attempted-recon; sid:200005656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswapz.blogspot.com",nocase; classtype:attempted-recon; sid:200005657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakesweb.info",nocase; classtype:attempted-recon; sid:200005658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancalteswap.finance",nocase; classtype:attempted-recon; sid:200005659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancokeswope.finance.mechadda.com",nocase; classtype:attempted-recon; sid:200005660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"panelweb-4cae2.web.app",nocase; classtype:attempted-recon; sid:200005661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"panpaus.com",nocase; classtype:attempted-recon; sid:200005662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paragua.x10.mx",nocase; classtype:attempted-recon; sid:200005663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"parahuyhomepy.x10.mx",nocase; classtype:attempted-recon; sid:200005664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"parajuniorline22.x10.mx",nocase; classtype:attempted-recon; sid:200005665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"parallelmetaspace.com",nocase; classtype:attempted-recon; sid:200005666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"parallelprobablekeyboard.actualizaiongal.repl.co",nocase; classtype:attempted-recon; sid:200005667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"parcel-ups-service.com",nocase; classtype:attempted-recon; sid:200005668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"parfumieftin.eu",nocase; classtype:attempted-recon; sid:200005669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"park.great-site.net",nocase; classtype:attempted-recon; sid:200005670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"partnervrn.ru",nocase; classtype:attempted-recon; sid:200005671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"party-supevents.cf",nocase; classtype:attempted-recon; sid:200005672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"passionfruit4576261.brizy.site",nocase; classtype:attempted-recon; sid:200005673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pateltutorials.com",nocase; classtype:attempted-recon; sid:200005674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"patient-cell-40f5.updatedlogmylogin.workers.dev",nocase; classtype:attempted-recon; sid:200005675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"patient-cloud-9191.on.fleek.co",nocase; classtype:attempted-recon; sid:200005676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paverguide.com",nocase; classtype:attempted-recon; sid:200005677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pavivity.com",nocase; classtype:attempted-recon; sid:200005678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paxful-rep.com",nocase; classtype:attempted-recon; sid:200005679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paxful.com.ph",nocase; classtype:attempted-recon; sid:200005680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paxful53.com",nocase; classtype:attempted-recon; sid:200005681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pay2bd.com",nocase; classtype:attempted-recon; sid:200005682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"payment-remittance-advice.myportfolio.com",nocase; classtype:attempted-recon; sid:200005683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paymentnotificationnow.blogspot.com",nocase; classtype:attempted-recon; sid:200005684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paymydoctor.ltd",nocase; classtype:attempted-recon; sid:200005685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paypal.com.0.security-confirmation.d72b69c8e37aec662e13e39d929d6e3d.as2.2u.se",nocase; classtype:attempted-recon; sid:200005686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paypaxful.com",nocase; classtype:attempted-recon; sid:200005687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pbjozbihjb.duckdns.org",nocase; classtype:attempted-recon; sid:200005688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pbzvihrzjn.duckdns.org",nocase; classtype:attempted-recon; sid:200005689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pcpcpyqasf.duckdns.org",nocase; classtype:attempted-recon; sid:200005690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pcsystemscelaya.com",nocase; classtype:attempted-recon; sid:200005691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdf-cloud-document.weeblysite.com",nocase; classtype:attempted-recon; sid:200005692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdf-f202c.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdf-f202c.web.app",nocase; classtype:attempted-recon; sid:200005694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdf-shared-cloud.project-deec.workers.dev",nocase; classtype:attempted-recon; sid:200005695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdf-sharefile-doc.weeblysite.com",nocase; classtype:attempted-recon; sid:200005696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdf.file-documents.workers.dev",nocase; classtype:attempted-recon; sid:200005697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdfsecured.mystrikingly.com",nocase; classtype:attempted-recon; sid:200005698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"peconicbayrentalpropertyservices.com",nocase; classtype:attempted-recon; sid:200005699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pederopeder.com",nocase; classtype:attempted-recon; sid:200005700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pedforlag.no",nocase; classtype:attempted-recon; sid:200005701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pembatalan-pemblokiran72.weebly.com",nocase; classtype:attempted-recon; sid:200005702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pemblokiran-fb.wixsite.com",nocase; classtype:attempted-recon; sid:200005703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pemulihan-akunfb23.weebly.com",nocase; classtype:attempted-recon; sid:200005704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pemulihan-facebook08.weebly.com",nocase; classtype:attempted-recon; sid:200005705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pemulihan-facebook11.weebly.com",nocase; classtype:attempted-recon; sid:200005706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pemulihan-facebook76.weebly.com",nocase; classtype:attempted-recon; sid:200005707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pemulihanpengguna8.wixsite.com",nocase; classtype:attempted-recon; sid:200005708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pengakjdxad92.ydns.eu",nocase; classtype:attempted-recon; sid:200005709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pepperelmillcampusllc.securevdr.com",nocase; classtype:attempted-recon; sid:200005710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"perfectenergy.in",nocase; classtype:attempted-recon; sid:200005711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"perfectliker.net",nocase; classtype:attempted-recon; sid:200005712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"perfectunionapparel.com",nocase; classtype:attempted-recon; sid:200005713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"performancelocal.com",nocase; classtype:attempted-recon; sid:200005714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"peringatan-pemblokiranid01.weeblysite.com",nocase; classtype:attempted-recon; sid:200005715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"perituza.com",nocase; classtype:attempted-recon; sid:200005716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"personalcapial.com",nocase; classtype:attempted-recon; sid:200005717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"personas-bank.homejo.repl.co",nocase; classtype:attempted-recon; sid:200005718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"personascrfienlinea.pana.red",nocase; classtype:attempted-recon; sid:200005719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"personasportal.hostfree.pw",nocase; classtype:attempted-recon; sid:200005720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pertinentraggedbookmarks.46321233.repl.co",nocase; classtype:attempted-recon; sid:200005721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pete08schworkdy.myportfolio.com",nocase; classtype:attempted-recon; sid:200005722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pfcpfvzcvy.duckdns.org",nocase; classtype:attempted-recon; sid:200005723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pfjykejodq.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pfjykejodq.web.app",nocase; classtype:attempted-recon; sid:200005725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pgdswaxm-jp.leyswmz.cn",nocase; classtype:attempted-recon; sid:200005726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pgdswaxm-jp.muymplk.cn",nocase; classtype:attempted-recon; sid:200005727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pgdswaxm-jp.myxbcux.cn",nocase; classtype:attempted-recon; sid:200005728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pgdswaxm-jp.ppzqlkh.cn",nocase; classtype:attempted-recon; sid:200005729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pgdswaxm-jp.shgnmxi.cn",nocase; classtype:attempted-recon; sid:200005730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pgdswaxm-jp.uyoiqwy.cn",nocase; classtype:attempted-recon; sid:200005731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pgdswaxm-jp.vsnznnw.cn",nocase; classtype:attempted-recon; sid:200005732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pgdswaxm-jp.wpthzht.cn",nocase; classtype:attempted-recon; sid:200005733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pgdswaxm-jp.zcmspqn.cn",nocase; classtype:attempted-recon; sid:200005734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"phantom-notificate.app",nocase; classtype:attempted-recon; sid:200005735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"phantom-notify.app",nocase; classtype:attempted-recon; sid:200005736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"phantom-secure.app",nocase; classtype:attempted-recon; sid:200005737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"phantom-wallett.azurewebsites.net",nocase; classtype:attempted-recon; sid:200005738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"phantomwalett.app",nocase; classtype:attempted-recon; sid:200005739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pheia.gr",nocase; classtype:attempted-recon; sid:200005740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"phishingbrou.rammserker.repl.co",nocase; classtype:attempted-recon; sid:200005741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"photoboothrentalmemphistn.com",nocase; classtype:attempted-recon; sid:200005742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"photostock.uns.ac.id",nocase; classtype:attempted-recon; sid:200005743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"php5ymysql.webcindario.com",nocase; classtype:attempted-recon; sid:200005744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"phreshphoto.com",nocase; classtype:attempted-recon; sid:200005745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"picnic.industries",nocase; classtype:attempted-recon; sid:200005746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pidetuprestamo.stage.analyzenbd.com",nocase; classtype:attempted-recon; sid:200005747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"piechnik.ca",nocase; classtype:attempted-recon; sid:200005748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pikay13.github.io",nocase; classtype:attempted-recon; sid:200005749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pilatesonline.ie",nocase; classtype:attempted-recon; sid:200005750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"piltullhsh.duckdns.org",nocase; classtype:attempted-recon; sid:200005751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pinballfinder.org",nocase; classtype:attempted-recon; sid:200005752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pinjm.9o9l9k8.cn",nocase; classtype:attempted-recon; sid:200005753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pinkmaids.sg",nocase; classtype:attempted-recon; sid:200005754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pinoyforhire.com",nocase; classtype:attempted-recon; sid:200005755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pipe302414607-ypu6n69k.systeme.io",nocase; classtype:attempted-recon; sid:200005756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pipikitele.temp.swtest.ru",nocase; classtype:attempted-recon; sid:200005757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"piscinaveronza.com",nocase; classtype:attempted-recon; sid:200005758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pisosfarias-0-polygonon-0.blogspot.com",nocase; classtype:attempted-recon; sid:200005759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pixilo.tk",nocase; classtype:attempted-recon; sid:200005760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pizzabacau.ro",nocase; classtype:attempted-recon; sid:200005761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pkt-bpsdm.kalbarprov.go.id",nocase; classtype:attempted-recon; sid:200005762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pkuenoi.it",nocase; classtype:attempted-recon; sid:200005763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pl.m-inpost.cc",nocase; classtype:attempted-recon; sid:200005764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"placeboook.com",nocase; classtype:attempted-recon; sid:200005765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plain-meadow-6763.on.fleek.co",nocase; classtype:attempted-recon; sid:200005766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plain-mud-69ed.wtbappraiser5791.workers.dev",nocase; classtype:attempted-recon; sid:200005767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plain.selalusalome.workers.dev",nocase; classtype:attempted-recon; sid:200005768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plasticaindia.com",nocase; classtype:attempted-recon; sid:200005769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"platdujour.co.uk",nocase; classtype:attempted-recon; sid:200005770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"platformadigitalar.digitalline618.repl.co",nocase; classtype:attempted-recon; sid:200005771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"play-deikifngsdoms.com",nocase; classtype:attempted-recon; sid:200005772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"play.decentrelgemas.com",nocase; classtype:attempted-recon; sid:200005773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"playgalagame.app",nocase; classtype:attempted-recon; sid:200005774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plcilpkius.duckdns.org",nocase; classtype:attempted-recon; sid:200005775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plg-polygon-tecnology.blogspot.com",nocase; classtype:attempted-recon; sid:200005776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pliofilmco.pl",nocase; classtype:attempted-recon; sid:200005777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pnbe-b975b2.ingress-earth.ewp.live",nocase; classtype:attempted-recon; sid:200005778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pndyabmljj.duckdns.org",nocase; classtype:attempted-recon; sid:200005779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pnjone.com",nocase; classtype:attempted-recon; sid:200005780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pnmcs.com",nocase; classtype:attempted-recon; sid:200005781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pnycmazcyy.duckdns.org",nocase; classtype:attempted-recon; sid:200005782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pnyrhivcyh.duckdns.org",nocase; classtype:attempted-recon; sid:200005783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poc-rewards-program-c2dfc.web.app",nocase; classtype:attempted-recon; sid:200005784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poconoshotels.com",nocase; classtype:attempted-recon; sid:200005785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poczta-polska.e-kei.pl",nocase; classtype:attempted-recon; sid:200005786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poiunb.shijijunan.cn",nocase; classtype:attempted-recon; sid:200005787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pokajca.web.app",nocase; classtype:attempted-recon; sid:200005788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poligrafiapias.com",nocase; classtype:attempted-recon; sid:200005789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polinokij-b9379a.ingress-florina.ewp.live",nocase; classtype:attempted-recon; sid:200005790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polished-frost-5c8b.pearwormermone.workers.dev",nocase; classtype:attempted-recon; sid:200005791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polished-poetry-05d5.crestport.workers.dev",nocase; classtype:attempted-recon; sid:200005792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polishedvcxvb.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200005793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polkabridge-giveaway.com",nocase; classtype:attempted-recon; sid:200005794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polkadot.network",nocase; classtype:attempted-recon; sid:200005795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polllygonn-waallet.blogspot.com",nocase; classtype:attempted-recon; sid:200005796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pollyggon.blogspot.com",nocase; classtype:attempted-recon; sid:200005797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pollygonnwalletconect.blogspot.com",nocase; classtype:attempted-recon; sid:200005798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polngdhmmz.duckdns.org",nocase; classtype:attempted-recon; sid:200005799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poloskairto.hu",nocase; classtype:attempted-recon; sid:200005800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polska-dpd.merchant781351.site",nocase; classtype:attempted-recon; sid:200005801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polska-lnpost.46792.org",nocase; classtype:attempted-recon; sid:200005802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polska-lnpost.merchant781351.site",nocase; classtype:attempted-recon; sid:200005803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygon---technology.blogspot.com",nocase; classtype:attempted-recon; sid:200005804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygon-onlline.blogspot.com",nocase; classtype:attempted-recon; sid:200005805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygon-wallet0.blogspot.com",nocase; classtype:attempted-recon; sid:200005806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygon-welb.net",nocase; classtype:attempted-recon; sid:200005807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygonconnecttwallet.blogspot.com",nocase; classtype:attempted-recon; sid:200005808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygonexs05.blogspot.com",nocase; classtype:attempted-recon; sid:200005809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygonixls-antonio.blogspot.com",nocase; classtype:attempted-recon; sid:200005810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygonixls-leandra.blogspot.com",nocase; classtype:attempted-recon; sid:200005811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygonjan.blogspot.com",nocase; classtype:attempted-recon; sid:200005812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygonmac.blogspot.com",nocase; classtype:attempted-recon; sid:200005813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygonxls-raylson.blogspot.com",nocase; classtype:attempted-recon; sid:200005814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygonxlss-antonio.blogspot.com",nocase; classtype:attempted-recon; sid:200005815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polyqon-technology-connect-wallet.blogspot.com",nocase; classtype:attempted-recon; sid:200005816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poocoin-app-plataform-connect.blogspot.com",nocase; classtype:attempted-recon; sid:200005817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poocoin-bsc-charts-token-connect.blogspot.com",nocase; classtype:attempted-recon; sid:200005818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poocoin-connect-app-tokens.blogspot.com",nocase; classtype:attempted-recon; sid:200005819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poocoin-connect-plataform.blogspot.com",nocase; classtype:attempted-recon; sid:200005820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poojasharma1511.github.io",nocase; classtype:attempted-recon; sid:200005821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"populardclud.42web.io",nocase; classtype:attempted-recon; sid:200005822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"popupsubsmart.streamlink.to",nocase; classtype:attempted-recon; sid:200005823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poraskjdasfs.hostfree.pw",nocase; classtype:attempted-recon; sid:200005824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"porkexverse.com",nocase; classtype:attempted-recon; sid:200005825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"porrtalperson.hostfree.pw",nocase; classtype:attempted-recon; sid:200005826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portal-bci.x10.mx",nocase; classtype:attempted-recon; sid:200005827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portal-onlines.cf",nocase; classtype:attempted-recon; sid:200005828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portal-onlines.tk",nocase; classtype:attempted-recon; sid:200005829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portal.fdx.co.il",nocase; classtype:attempted-recon; sid:200005830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portalappseguro.hostfree.pw",nocase; classtype:attempted-recon; sid:200005831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portalclicknegocios.com.br",nocase; classtype:attempted-recon; sid:200005832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portaldosfamosos.com.br",nocase; classtype:attempted-recon; sid:200005833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portalempsweb.info",nocase; classtype:attempted-recon; sid:200005834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portalpayexito.hostfree.pw",nocase; classtype:attempted-recon; sid:200005835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portaltransaccionalseguropagos.liveblog365.com",nocase; classtype:attempted-recon; sid:200005836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portaltuyacupo.hostfree.pw",nocase; classtype:attempted-recon; sid:200005837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portaluytareaandfdhrth.liveblog365.com",nocase; classtype:attempted-recon; sid:200005838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"porthceri.com",nocase; classtype:attempted-recon; sid:200005839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"posb.com-financial.one",nocase; classtype:attempted-recon; sid:200005840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poseidon-xsuit.duckdns.org",nocase; classtype:attempted-recon; sid:200005841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"position-exachange-naps.blogspot.com",nocase; classtype:attempted-recon; sid:200005842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"posminterurugiay.ultimatefreehost.in",nocase; classtype:attempted-recon; sid:200005843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"post-at.info-trackings.su",nocase; classtype:attempted-recon; sid:200005844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postalfees-uk.com",nocase; classtype:attempted-recon; sid:200005845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postaltrasacionalexito.lovestoblog.com",nocase; classtype:attempted-recon; sid:200005846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postamyc.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postamyc.web.app",nocase; classtype:attempted-recon; sid:200005848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postch9192.cargo.site",nocase; classtype:attempted-recon; sid:200005849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postdis-b7fa55.ingress-bonde.ewp.live",nocase; classtype:attempted-recon; sid:200005850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postmailer.onedrive0001.workers.dev",nocase; classtype:attempted-recon; sid:200005851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postonli.com",nocase; classtype:attempted-recon; sid:200005852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"posyandu.bandungkab.go.id",nocase; classtype:attempted-recon; sid:200005853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"potablegenuinevalue.galiic80a.repl.co",nocase; classtype:attempted-recon; sid:200005854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"power-share-file-drive-view.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"power-share-file-drive-view.web.app",nocase; classtype:attempted-recon; sid:200005856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"power-share-file-folder-view.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"power-share-file-folder-view.web.app",nocase; classtype:attempted-recon; sid:200005858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"power-share-file-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"power-share-file-folder.web.app",nocase; classtype:attempted-recon; sid:200005860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"powerlessstandardmysql.treaspotq.repl.co",nocase; classtype:attempted-recon; sid:200005861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"powersafeenergia.blogspot.com",nocase; classtype:attempted-recon; sid:200005862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ppsekwrkxe.duckdns.org",nocase; classtype:attempted-recon; sid:200005863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pr7k4s.csb.app",nocase; classtype:attempted-recon; sid:200005864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pra-voce-solucoes.com",nocase; classtype:attempted-recon; sid:200005865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prairieharbor.org",nocase; classtype:attempted-recon; sid:200005866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prekcmpusa.co.vu",nocase; classtype:attempted-recon; sid:200005867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"premiaprestamosibk.noustecnologia.com.br",nocase; classtype:attempted-recon; sid:200005868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preppingconfidence.com",nocase; classtype:attempted-recon; sid:200005869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preview-content-projet.sugar-voicee.workers.dev",nocase; classtype:attempted-recon; sid:200005870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preview-document.tortesabun.workers.dev",nocase; classtype:attempted-recon; sid:200005871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preview-download-file.dating-optimize.workers.dev",nocase; classtype:attempted-recon; sid:200005872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preview-download-project.voice-chatt.workers.dev",nocase; classtype:attempted-recon; sid:200005873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preview-files.project-deec.workers.dev",nocase; classtype:attempted-recon; sid:200005874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preview-folder.people-media.workers.dev",nocase; classtype:attempted-recon; sid:200005875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preview-folder.protect-secur.workers.dev",nocase; classtype:attempted-recon; sid:200005876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"primeone.org",nocase; classtype:attempted-recon; sid:200005877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"primex-inter.com",nocase; classtype:attempted-recon; sid:200005878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prince.ps",nocase; classtype:attempted-recon; sid:200005879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"print0ffce.rec6110.workers.dev",nocase; classtype:attempted-recon; sid:200005880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"printingon5th.com",nocase; classtype:attempted-recon; sid:200005881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prithvisai.com.swaraj-stones.com",nocase; classtype:attempted-recon; sid:200005882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"priv4broulo9gc.fircbroulo9gc3.repl.co",nocase; classtype:attempted-recon; sid:200005883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"private-pdf.iteroageme.workers.dev",nocase; classtype:attempted-recon; sid:200005884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"private.raydiumalpha.com",nocase; classtype:attempted-recon; sid:200005885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"priyankasandokar1606.github.io",nocase; classtype:attempted-recon; sid:200005886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pro-nfts.com",nocase; classtype:attempted-recon; sid:200005887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"probableusedgraphics.tokf.repl.co",nocase; classtype:attempted-recon; sid:200005888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"problemserviceacc.com",nocase; classtype:attempted-recon; sid:200005889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"problemstandacc0unt.com",nocase; classtype:attempted-recon; sid:200005890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"procedi-ora2022.com",nocase; classtype:attempted-recon; sid:200005891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"procobro.eu",nocase; classtype:attempted-recon; sid:200005892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"procreditecuatorial.info",nocase; classtype:attempted-recon; sid:200005893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"procservautomatizacion.com",nocase; classtype:attempted-recon; sid:200005894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"production.shiny-tree-e80c.clane.workers.dev",nocase; classtype:attempted-recon; sid:200005895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"produkpicture.ml",nocase; classtype:attempted-recon; sid:200005896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"professhealthproducts.com",nocase; classtype:attempted-recon; sid:200005897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"profiimobiliare.ro",nocase; classtype:attempted-recon; sid:200005898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"profilaktualisierung-dkb.is-certified.com",nocase; classtype:attempted-recon; sid:200005899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"profileeefacebok2563155478549652.filesusr.com",nocase; classtype:attempted-recon; sid:200005900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"proglassmarine.com",nocase; classtype:attempted-recon; sid:200005901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"programowanietowyzwanie.pl",nocase; classtype:attempted-recon; sid:200005902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"progresamosjuntos.top",nocase; classtype:attempted-recon; sid:200005903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"progressionbanqposta.dynv6.net",nocase; classtype:attempted-recon; sid:200005904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project-cloud-folder.mature-voice.workers.dev",nocase; classtype:attempted-recon; sid:200005905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project-cloud-shared.oauthh-conf.workers.dev",nocase; classtype:attempted-recon; sid:200005906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project-files-download.secure-loads.workers.dev",nocase; classtype:attempted-recon; sid:200005907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project-folder.chat-securee.workers.dev",nocase; classtype:attempted-recon; sid:200005908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project-list.doceungeyymeu.workers.dev",nocase; classtype:attempted-recon; sid:200005909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project-preview-shared.grand-oauth.workers.dev",nocase; classtype:attempted-recon; sid:200005910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project-shared-pdf.shared-securee.workers.dev",nocase; classtype:attempted-recon; sid:200005911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project-sheet-doc.assign-sec.workers.dev",nocase; classtype:attempted-recon; sid:200005912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project11a-8cd2d.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project11a-8cd2d.web.app",nocase; classtype:attempted-recon; sid:200005914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project9c-ed771.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project9c-ed771.web.app",nocase; classtype:attempted-recon; sid:200005916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"projectfiles.trainercentral.com",nocase; classtype:attempted-recon; sid:200005917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"projectsofyemen.com",nocase; classtype:attempted-recon; sid:200005918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prolaptop.net",nocase; classtype:attempted-recon; sid:200005919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prometheus.asia-pancakeswap.dysnix.org",nocase; classtype:attempted-recon; sid:200005920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"promo.mycorporate-rewards.net",nocase; classtype:attempted-recon; sid:200005921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"promosparatodoss.com",nocase; classtype:attempted-recon; sid:200005922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"promotoraderesistencia.com",nocase; classtype:attempted-recon; sid:200005923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"proof.mint-live.cc",nocase; classtype:attempted-recon; sid:200005924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"propair.hu",nocase; classtype:attempted-recon; sid:200005925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"proposal-projects.procesrpguvins.workers.dev",nocase; classtype:attempted-recon; sid:200005926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"proposalldoc111.myportfolio.com",nocase; classtype:attempted-recon; sid:200005927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prosecw83.pages.dev",nocase; classtype:attempted-recon; sid:200005928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prosxsiuser.myfreesites.net",nocase; classtype:attempted-recon; sid:200005929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"protect-4d56vca.surge.sh",nocase; classtype:attempted-recon; sid:200005930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"protected-message2022-1311615844.cos.na-ashburn.myqcloud.com",nocase; classtype:attempted-recon; sid:200005931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"protection-settings.cc",nocase; classtype:attempted-recon; sid:200005932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"protection.retarus.com",nocase; classtype:attempted-recon; sid:200005933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"protocolops.net",nocase; classtype:attempted-recon; sid:200005934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"provosxz.co.vu",nocase; classtype:attempted-recon; sid:200005935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prstamomarzo2022.com",nocase; classtype:attempted-recon; sid:200005936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prueba-1.galiciahome1.repl.co",nocase; classtype:attempted-recon; sid:200005937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prueflowbrooks.top",nocase; classtype:attempted-recon; sid:200005938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prumak.com",nocase; classtype:attempted-recon; sid:200005939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psd2-kunde13928.info",nocase; classtype:attempted-recon; sid:200005940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psd2-kunde2171.info",nocase; classtype:attempted-recon; sid:200005941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psd2-kunde44532.info",nocase; classtype:attempted-recon; sid:200005942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psd2-kunde6671.info",nocase; classtype:attempted-recon; sid:200005943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psd2-kunde923.info",nocase; classtype:attempted-recon; sid:200005944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psd2-kunde95133.info",nocase; classtype:attempted-recon; sid:200005945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psd2-kunde99772.info",nocase; classtype:attempted-recon; sid:200005946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psqisoe2.ga",nocase; classtype:attempted-recon; sid:200005947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ptlu.godaddysites.com",nocase; classtype:attempted-recon; sid:200005948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ptpbfsvjfs.duckdns.org",nocase; classtype:attempted-recon; sid:200005949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ptrhcixpyz.duckdns.org",nocase; classtype:attempted-recon; sid:200005950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ptxx.cc",nocase; classtype:attempted-recon; sid:200005951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pubgm-zingvn.online",nocase; classtype:attempted-recon; sid:200005952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pubgmidassbuyy.com",nocase; classtype:attempted-recon; sid:200005953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"publish-p43452-e180057.adobeaemcloud.com",nocase; classtype:attempted-recon; sid:200005954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pulaubiru.xyz",nocase; classtype:attempted-recon; sid:200005955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pumaperspectives.com",nocase; classtype:attempted-recon; sid:200005956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"punesquare.com",nocase; classtype:attempted-recon; sid:200005957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"purple-morning-d15d.beewatchsea.workers.dev",nocase; classtype:attempted-recon; sid:200005958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"puzzling-exciting-halibut.glitch.me",nocase; classtype:attempted-recon; sid:200005959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pwshuogexh.duckdns.org",nocase; classtype:attempted-recon; sid:200005960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pzgxjvtfcz.duckdns.org",nocase; classtype:attempted-recon; sid:200005961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qakntzmfkl.duckdns.org",nocase; classtype:attempted-recon; sid:200005962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qaqmjpgshh.duckdns.org",nocase; classtype:attempted-recon; sid:200005963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qaweew3432.web.app",nocase; classtype:attempted-recon; sid:200005964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qbagcufiog.duckdns.org",nocase; classtype:attempted-recon; sid:200005965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qbfffwfwco.duckdns.org",nocase; classtype:attempted-recon; sid:200005966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qbocd.csb.app",nocase; classtype:attempted-recon; sid:200005967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qbxoqajhgi.duckdns.org",nocase; classtype:attempted-recon; sid:200005968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qcbxdzsvlx.duckdns.org",nocase; classtype:attempted-recon; sid:200005969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qcmtqfxkww.duckdns.org",nocase; classtype:attempted-recon; sid:200005970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qcztetpvhm.duckdns.org",nocase; classtype:attempted-recon; sid:200005971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qdzytoptsf.duckdns.org",nocase; classtype:attempted-recon; sid:200005972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qfqkipuzdd.duckdns.org",nocase; classtype:attempted-recon; sid:200005973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qfuwhjswtm.duckdns.org",nocase; classtype:attempted-recon; sid:200005974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qgdsgzeraqfqdfc.blogspot.com",nocase; classtype:attempted-recon; sid:200005975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qgjdlsnzma.duckdns.org",nocase; classtype:attempted-recon; sid:200005976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qhj39hfxqftr.clickfunnels.com",nocase; classtype:attempted-recon; sid:200005977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qhryat.ga",nocase; classtype:attempted-recon; sid:200005978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qhzqhkhodq.duckdns.org",nocase; classtype:attempted-recon; sid:200005979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qi4hjkdgvx.club",nocase; classtype:attempted-recon; sid:200005980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qizangroup.com",nocase; classtype:attempted-recon; sid:200005981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qknztxzxdd.duckdns.org",nocase; classtype:attempted-recon; sid:200005982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qktu4lqkhdklf.club",nocase; classtype:attempted-recon; sid:200005983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qlms1.hyperphp.com",nocase; classtype:attempted-recon; sid:200005984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qltnlkaovt.duckdns.org",nocase; classtype:attempted-recon; sid:200005985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qmoqtlrfbp.duckdns.org",nocase; classtype:attempted-recon; sid:200005986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qmzabdb7yjqygnddyphsnxh4w74woz6gk9zu5hgtbqjvxw.myportfolio.com",nocase; classtype:attempted-recon; sid:200005987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qnmjqikuma.duckdns.org",nocase; classtype:attempted-recon; sid:200005988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qntdie.cn",nocase; classtype:attempted-recon; sid:200005989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qomdesign.ir",nocase; classtype:attempted-recon; sid:200005990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qordjmpqlg.duckdns.org",nocase; classtype:attempted-recon; sid:200005991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qotiqq863jh.club",nocase; classtype:attempted-recon; sid:200005992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qp1ctm.webwave.dev",nocase; classtype:attempted-recon; sid:200005993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrmkakmbni.duckdns.org",nocase; classtype:attempted-recon; sid:200005994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qsh74pekkv5e8.clickfunnels.com",nocase; classtype:attempted-recon; sid:200005995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qss1a.hyperphp.com",nocase; classtype:attempted-recon; sid:200005996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qsvk6n.webwave.dev",nocase; classtype:attempted-recon; sid:200005997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qt23iyjfgq.club",nocase; classtype:attempted-recon; sid:200005998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quafreefirevip.gearena.vn",nocase; classtype:attempted-recon; sid:200005999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quantumwc.online",nocase; classtype:attempted-recon; sid:200006000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quaran2082022tine048103-1312962597.cos.ap-seoul.myqcloud.com",nocase; classtype:attempted-recon; sid:200006001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quarantine-2542022app-1311433986.cos.ap-nanjing.myqcloud.com",nocase; classtype:attempted-recon; sid:200006002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quarantine-mes2742022-1311564033.cos.na-ashburn.myqcloud.com",nocase; classtype:attempted-recon; sid:200006003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quarantine26042022mic-1311531473.cos.ap-seoul.myqcloud.com",nocase; classtype:attempted-recon; sid:200006004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quarantine27042022web-1311564033.cos.ap-nanjing.myqcloud.com",nocase; classtype:attempted-recon; sid:200006005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quarantine29042022app-1311615844.cos.ap-chengdu.myqcloud.com",nocase; classtype:attempted-recon; sid:200006006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qube.kz",nocase; classtype:attempted-recon; sid:200006007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quemados2.filesusr.com",nocase; classtype:attempted-recon; sid:200006008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quemonesgto.filesusr.com",nocase; classtype:attempted-recon; sid:200006009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quickrectifier.com",nocase; classtype:attempted-recon; sid:200006010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quiet-block-e399.westmoons.workers.dev",nocase; classtype:attempted-recon; sid:200006011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quiet-meadow.8av37ve6.workers.dev",nocase; classtype:attempted-recon; sid:200006012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quizzical-jennings.107-182-129-213.plesk.page",nocase; classtype:attempted-recon; sid:200006013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quizzical-mcnulty.185-194-219-163.plesk.page",nocase; classtype:attempted-recon; sid:200006014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qwwzrfzzkf.duckdns.org",nocase; classtype:attempted-recon; sid:200006015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qxmxnwyrpz.duckdns.org",nocase; classtype:attempted-recon; sid:200006016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qxprhzi.top",nocase; classtype:attempted-recon; sid:200006017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"r2mzim.com",nocase; classtype:attempted-recon; sid:200006018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"r9ogn4.webwave.dev",nocase; classtype:attempted-recon; sid:200006019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ra.kiech.correarealtygroup.cl.#.ahr0chm6ly9iywzrcmvpzjnkzdrwegz0n3hzeg83bxnqedv3axdwamq0zgdmbmxrnxh1advnamezzxdudxrnnghnbs5pcgzzlm5mdhn0b3jhz2uubgluay8jywjvbmlsbgfacmhyaw50zxjuyxrpb25hbc5jb20=3d",nocase; classtype:attempted-recon; sid:200006020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rabbithole.mirror.xyz",nocase; classtype:attempted-recon; sid:200006021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rackenfordlabs.com",nocase; classtype:attempted-recon; sid:200006022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"radhikamd.github.io",nocase; classtype:attempted-recon; sid:200006023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"radiant-fjord-52274.herokuapp.com",nocase; classtype:attempted-recon; sid:200006024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"radver.com",nocase; classtype:attempted-recon; sid:200006025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rahadjars.com",nocase; classtype:attempted-recon; sid:200006026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raketoesnccsaasecasorsed.caaaosearescoooserkutsen.xfcxny.top",nocase; classtype:attempted-recon; sid:200006027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raketoesnccsaasecasorsedcceaoo.earescooosearkutsen.rinlvb.top",nocase; classtype:attempted-recon; sid:200006028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raketoncasord.aasccsorkutsen.pfbueg.top",nocase; classtype:attempted-recon; sid:200006029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raketoncasord.aasrkutsen.4478687.xyz",nocase; classtype:attempted-recon; sid:200006030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raketoncasord.arkccsoutsen.3545331.xyz",nocase; classtype:attempted-recon; sid:200006031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raketoncasord.arkccsoutsen.ahiatgp.top",nocase; classtype:attempted-recon; sid:200006032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raketoncasord.arkccsoutsen.qglno.top",nocase; classtype:attempted-recon; sid:200006033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raketoncasordceo.aasrkutsen.ahidtgf.top",nocase; classtype:attempted-recon; sid:200006034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rakutcn.co-jpudspen.qiuzuo.com.cn",nocase; classtype:attempted-recon; sid:200006035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rakutenetopd.com",nocase; classtype:attempted-recon; sid:200006036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rapid-disk-caef.anyrag8021015.workers.dev",nocase; classtype:attempted-recon; sid:200006037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rapidoyseguro.ihelpup.repl.co",nocase; classtype:attempted-recon; sid:200006038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rapidoyseguro.securiti.repl.co",nocase; classtype:attempted-recon; sid:200006039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rarbille.com",nocase; classtype:attempted-recon; sid:200006040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rarebli.blogspot.com",nocase; classtype:attempted-recon; sid:200006041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raspy-king-4ed0.settingspaqesapp.workers.dev",nocase; classtype:attempted-recon; sid:200006042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raspy-water-dcc2.beanwoodnode.workers.dev",nocase; classtype:attempted-recon; sid:200006043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ratu.link",nocase; classtype:attempted-recon; sid:200006044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rauchenbergerlenggries.clickfunnels.com",nocase; classtype:attempted-recon; sid:200006045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raycargo.com",nocase; classtype:attempted-recon; sid:200006046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raydinum.com",nocase; classtype:attempted-recon; sid:200006047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raydiumprotocol.net",nocase; classtype:attempted-recon; sid:200006048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raydyim.xyz",nocase; classtype:attempted-recon; sid:200006049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rayidium.com",nocase; classtype:attempted-recon; sid:200006050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raymondmjames.com",nocase; classtype:attempted-recon; sid:200006051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raynau.hyperphp.com",nocase; classtype:attempted-recon; sid:200006052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rbcmontgomery.com",nocase; classtype:attempted-recon; sid:200006053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rbllmnvefr.duckdns.org",nocase; classtype:attempted-recon; sid:200006054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rbtnr.hostfree.pw",nocase; classtype:attempted-recon; sid:200006055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rbunnrealtor.com",nocase; classtype:attempted-recon; sid:200006056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcqirmtmfy.duckdns.org",nocase; classtype:attempted-recon; sid:200006057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcube111111.web.app",nocase; classtype:attempted-recon; sid:200006058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcube111112.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcube111112.web.app",nocase; classtype:attempted-recon; sid:200006060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcube111113.web.app",nocase; classtype:attempted-recon; sid:200006061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcube111114.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcube111114.web.app",nocase; classtype:attempted-recon; sid:200006063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcubebit.bitbucket.io",nocase; classtype:attempted-recon; sid:200006064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcvmfceqru.duckdns.org",nocase; classtype:attempted-recon; sid:200006065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcvry.sftyacn.scrthlp.workers.dev",nocase; classtype:attempted-recon; sid:200006066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcvry.sprt.acn-cnfrm.workers.dev",nocase; classtype:attempted-recon; sid:200006067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rdhtire.net",nocase; classtype:attempted-recon; sid:200006068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rdtvnstzey.duckdns.org",nocase; classtype:attempted-recon; sid:200006069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"re-redirection-acc-id923872635122.blogspot.com",nocase; classtype:attempted-recon; sid:200006070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"re2ions.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"re2ions.web.app",nocase; classtype:attempted-recon; sid:200006072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"re5ions.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"re9ions.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"re9ions.web.app",nocase; classtype:attempted-recon; sid:200006075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reactivacion6363galicia.bancogalicia564.repl.co",nocase; classtype:attempted-recon; sid:200006076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reactivaciondigital.bancogalicia98.repl.co",nocase; classtype:attempted-recon; sid:200006077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reactivaciongal54.reactivesuclave.repl.co",nocase; classtype:attempted-recon; sid:200006078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reactiwqsdadsd3a.hostfree.pw",nocase; classtype:attempted-recon; sid:200006079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"realesign.com",nocase; classtype:attempted-recon; sid:200006080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"realizesolucoesfinbr.com",nocase; classtype:attempted-recon; sid:200006081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"realorigin.org",nocase; classtype:attempted-recon; sid:200006082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"realydue36.wixsite.com",nocase; classtype:attempted-recon; sid:200006083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebategrow.com",nocase; classtype:attempted-recon; sid:200006084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rechnunge.wpengine.com",nocase; classtype:attempted-recon; sid:200006085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"record-cloud-file.product-list.workers.dev",nocase; classtype:attempted-recon; sid:200006086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"recospa72.pages.dev",nocase; classtype:attempted-recon; sid:200006087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"recovery-fb.secure-acct.workers.dev",nocase; classtype:attempted-recon; sid:200006088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"recovery.co.vu",nocase; classtype:attempted-recon; sid:200006089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"recreatorme.github.io",nocase; classtype:attempted-recon; sid:200006090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"recruiting.rs.ba",nocase; classtype:attempted-recon; sid:200006091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rectifyconns.site",nocase; classtype:attempted-recon; sid:200006092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"recuperaciondecuenta-12b0.czemarkojo.workers.dev",nocase; classtype:attempted-recon; sid:200006093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"recvry-page-protection-comunity-problems-4511854274.web.id",nocase; classtype:attempted-recon; sid:200006094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"red-b90738.ingress-earth.ewp.live",nocase; classtype:attempted-recon; sid:200006095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redbysfrgroupebox.myfreesites.net",nocase; classtype:attempted-recon; sid:200006096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rede-gerenciadorcx-multiassistencia.blogspot.com",nocase; classtype:attempted-recon; sid:200006097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redeem-microsoft-code.sitey.me",nocase; classtype:attempted-recon; sid:200006098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redesign.randolphunlimited.net",nocase; classtype:attempted-recon; sid:200006099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rediractionid547012016089540218057.blogspot.com",nocase; classtype:attempted-recon; sid:200006100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redirection-b836d.web.app",nocase; classtype:attempted-recon; sid:200006101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redtailfriday0003.web.app",nocase; classtype:attempted-recon; sid:200006102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redtailfriday0004.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redtailfriday0004.web.app",nocase; classtype:attempted-recon; sid:200006104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redtailfriday0006.web.app",nocase; classtype:attempted-recon; sid:200006105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redtailfriday0009.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redtailwed0005.web.app",nocase; classtype:attempted-recon; sid:200006107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reg.submit.f46a.live",nocase; classtype:attempted-recon; sid:200006108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reg.submit.r78z.live",nocase; classtype:attempted-recon; sid:200006109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reg.tax.f27a.live",nocase; classtype:attempted-recon; sid:200006110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reg123r.web.app",nocase; classtype:attempted-recon; sid:200006111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regalnutritious.com",nocase; classtype:attempted-recon; sid:200006112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regenerations.eu",nocase; classtype:attempted-recon; sid:200006113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regionalezeknozoyda.flazio.com",nocase; classtype:attempted-recon; sid:200006114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"register.templejoy.net",nocase; classtype:attempted-recon; sid:200006115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"registradigital.com",nocase; classtype:attempted-recon; sid:200006116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regoingate01-online.preview-domain.com",nocase; classtype:attempted-recon; sid:200006117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regularizaautorepuve.com",nocase; classtype:attempted-recon; sid:200006118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regulation-100020003567867447877826.tk",nocase; classtype:attempted-recon; sid:200006119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regulation-100020003567867447877827.tk",nocase; classtype:attempted-recon; sid:200006120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regulation-100020003567867447877828.tk",nocase; classtype:attempted-recon; sid:200006121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regulation-100020003567867447877829.tk",nocase; classtype:attempted-recon; sid:200006122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regulation-100020003567867447877831.tk",nocase; classtype:attempted-recon; sid:200006123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regulation-100020003567867447877832.tk",nocase; classtype:attempted-recon; sid:200006124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regulation-100020003567867447877833.tk",nocase; classtype:attempted-recon; sid:200006125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regulation-100020003567867447877834.tk",nocase; classtype:attempted-recon; sid:200006126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regulation-100020003567867447877835.tk",nocase; classtype:attempted-recon; sid:200006127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regulation-100020003567867447877836.tk",nocase; classtype:attempted-recon; sid:200006128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regulation-100020003567867447877837.tk",nocase; classtype:attempted-recon; sid:200006129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regulation-100020003567867447877839.tk",nocase; classtype:attempted-recon; sid:200006130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regulation-100076767653435695748645612.ml",nocase; classtype:attempted-recon; sid:200006131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regulation-100076767653435695748645614.ml",nocase; classtype:attempted-recon; sid:200006132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regulation-100076767653435695748645636.tk",nocase; classtype:attempted-recon; sid:200006133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regulation-100076767653435695748645640.tk",nocase; classtype:attempted-recon; sid:200006134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rehabilitacionymedicinadeportiva.com",nocase; classtype:attempted-recon; sid:200006135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reinforcementdetail.co.uk",nocase; classtype:attempted-recon; sid:200006136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"relation-client-carrefour.duckdns.org",nocase; classtype:attempted-recon; sid:200006137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"relief.so",nocase; classtype:attempted-recon; sid:200006138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"remototarget.ihostfull.com",nocase; classtype:attempted-recon; sid:200006139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"remzicakar.com.tr",nocase; classtype:attempted-recon; sid:200006140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rentapb.com",nocase; classtype:attempted-recon; sid:200006141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"repl-mess.myfreesites.net",nocase; classtype:attempted-recon; sid:200006142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"replublica-ebrou.entrarbanco.repl.co",nocase; classtype:attempted-recon; sid:200006143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"request.br.ironmountain.com",nocase; classtype:attempted-recon; sid:200006144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"res-va.web.app",nocase; classtype:attempted-recon; sid:200006145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"res470.pages.dev",nocase; classtype:attempted-recon; sid:200006146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reschedule-package.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reschedule-package.web.app",nocase; classtype:attempted-recon; sid:200006148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"resect-alert-confrimation-ionos.glitch.me",nocase; classtype:attempted-recon; sid:200006149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"resolvendo-registro-solucoes.com",nocase; classtype:attempted-recon; sid:200006150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rest-co.osptota.cn",nocase; classtype:attempted-recon; sid:200006151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"restles.ndkdjndnnd.workers.dev",nocase; classtype:attempted-recon; sid:200006152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"restricted-adhelpp.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"restricted-adhelpp.web.app",nocase; classtype:attempted-recon; sid:200006154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"retailbrainbank.com",nocase; classtype:attempted-recon; sid:200006155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"retcxs.ldiaobl.cn",nocase; classtype:attempted-recon; sid:200006156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"retiro.cl",nocase; classtype:attempted-recon; sid:200006157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reumen-bgaliciaa.c1.biz",nocase; classtype:attempted-recon; sid:200006158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"revboosters.com",nocase; classtype:attempted-recon; sid:200006159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"review-attached-payee.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"review-attached-payee.web.app",nocase; classtype:attempted-recon; sid:200006161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"review-payee-au.com",nocase; classtype:attempted-recon; sid:200006162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reviewaccess.typeform.com",nocase; classtype:attempted-recon; sid:200006163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"revolut-app.com",nocase; classtype:attempted-recon; sid:200006164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rewards-uni.org",nocase; classtype:attempted-recon; sid:200006165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rewardsyncdappssconnect.web.app",nocase; classtype:attempted-recon; sid:200006166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rewgewltgf.duckdns.org",nocase; classtype:attempted-recon; sid:200006167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rfgegdsfghdfhfds.x10.mx",nocase; classtype:attempted-recon; sid:200006168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rfgegdsfghdfhfdssada.x10.mx",nocase; classtype:attempted-recon; sid:200006169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rfphomesmke.myportfolio.com",nocase; classtype:attempted-recon; sid:200006170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rgdhiarpkn.duckdns.org",nocase; classtype:attempted-recon; sid:200006171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rgfbg.38256.cn",nocase; classtype:attempted-recon; sid:200006172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rgivpn.com",nocase; classtype:attempted-recon; sid:200006173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rgthtr.paxrmyy.cn",nocase; classtype:attempted-recon; sid:200006174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rgwmjoyrfy.duckdns.org",nocase; classtype:attempted-recon; sid:200006175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rhr.lpsszyy.cn",nocase; classtype:attempted-recon; sid:200006176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rhvffddffggvghbb.weeblysite.com",nocase; classtype:attempted-recon; sid:200006177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"riagnlew.hyperphp.com",nocase; classtype:attempted-recon; sid:200006178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"riaufpimow.duckdns.org",nocase; classtype:attempted-recon; sid:200006179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"richmt.art",nocase; classtype:attempted-recon; sid:200006180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"riconsegnacarta.com",nocase; classtype:attempted-recon; sid:200006181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rightfitters.co.uk",nocase; classtype:attempted-recon; sid:200006182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"risedefenders.io",nocase; classtype:attempted-recon; sid:200006183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"risemedicalmarijuanadisp.blogspot.com",nocase; classtype:attempted-recon; sid:200006184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"risersmn.com",nocase; classtype:attempted-recon; sid:200006185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"risingwebvibe.com",nocase; classtype:attempted-recon; sid:200006186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"riveroflife.org.in",nocase; classtype:attempted-recon; sid:200006187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rivertree.church",nocase; classtype:attempted-recon; sid:200006188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"riverwidemusic.com",nocase; classtype:attempted-recon; sid:200006189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rixefhbuku.duckdns.org",nocase; classtype:attempted-recon; sid:200006190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rjaygraazw.duckdns.org",nocase; classtype:attempted-recon; sid:200006191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rmcodseelk.duckdns.org",nocase; classtype:attempted-recon; sid:200006192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rmelwsx.hyperphp.com",nocase; classtype:attempted-recon; sid:200006193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rnanwsx.hyperphp.com",nocase; classtype:attempted-recon; sid:200006194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rnnnrfateasynnow.online",nocase; classtype:attempted-recon; sid:200006195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ro0vc.app.link",nocase; classtype:attempted-recon; sid:200006196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"robertcarlsonlaw.com",nocase; classtype:attempted-recon; sid:200006197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"robotzindisguise.com",nocase; classtype:attempted-recon; sid:200006198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roccobonheur1-my-cheetah-website-copy.cheetah.builderall.com",nocase; classtype:attempted-recon; sid:200006199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rockstheme.com",nocase; classtype:attempted-recon; sid:200006200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rodriguezadams.com",nocase; classtype:attempted-recon; sid:200006201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roisnoob.github.io",nocase; classtype:attempted-recon; sid:200006202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"romxn96.de",nocase; classtype:attempted-recon; sid:200006203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ronin-wallet.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ronin-wallet.web.app",nocase; classtype:attempted-recon; sid:200006205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roninchain.website",nocase; classtype:attempted-recon; sid:200006206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roninwallet-official.com",nocase; classtype:attempted-recon; sid:200006207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roninwallet.cm",nocase; classtype:attempted-recon; sid:200006208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roninwalletsupport.io",nocase; classtype:attempted-recon; sid:200006209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roolcast23.chindyy.repl.co",nocase; classtype:attempted-recon; sid:200006210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rootscomm.cam",nocase; classtype:attempted-recon; sid:200006211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roouoei.ml",nocase; classtype:attempted-recon; sid:200006212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rosaelen.alwaysdata.net",nocase; classtype:attempted-recon; sid:200006213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roselaka.cloudaccess.host",nocase; classtype:attempted-recon; sid:200006214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rosshw.com",nocase; classtype:attempted-recon; sid:200006215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rossy.pages.dev",nocase; classtype:attempted-recon; sid:200006216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rough-dawn-ccf0.spectrumservdc5308.workers.dev",nocase; classtype:attempted-recon; sid:200006217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"round-violet-c0fe.henhigay285.workers.dev",nocase; classtype:attempted-recon; sid:200006218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roundcube-5ae8a.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roundcube-5ae8a.web.app",nocase; classtype:attempted-recon; sid:200006220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roundcube-cpanel-wren.surge.sh",nocase; classtype:attempted-recon; sid:200006221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roundcube-updatealx.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roundcube-updatealx.web.app",nocase; classtype:attempted-recon; sid:200006223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roundcube0004.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roundcube0004.web.app",nocase; classtype:attempted-recon; sid:200006225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roundcube0005.web.app",nocase; classtype:attempted-recon; sid:200006226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"royal-meat.eu",nocase; classtype:attempted-recon; sid:200006227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"royal-mode-1212.on.fleek.co",nocase; classtype:attempted-recon; sid:200006228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"royal9990.com",nocase; classtype:attempted-recon; sid:200006229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"royaleboxm11.com",nocase; classtype:attempted-recon; sid:200006230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"royalmail.world",nocase; classtype:attempted-recon; sid:200006231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roydium.io",nocase; classtype:attempted-recon; sid:200006232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rptrufnpbc.duckdns.org",nocase; classtype:attempted-recon; sid:200006233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rpwxepesij.duckdns.org",nocase; classtype:attempted-recon; sid:200006234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rpxhvbxjre.duckdns.org",nocase; classtype:attempted-recon; sid:200006235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rqerqfnlss.duckdns.org",nocase; classtype:attempted-recon; sid:200006236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rriwy8.webwave.dev",nocase; classtype:attempted-recon; sid:200006237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rrrlzyqoic.duckdns.org",nocase; classtype:attempted-recon; sid:200006238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rrrrett543.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rrrrett543.web.app",nocase; classtype:attempted-recon; sid:200006240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rruyxupros.duckdns.org",nocase; classtype:attempted-recon; sid:200006241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rtvbuxynog.duckdns.org",nocase; classtype:attempted-recon; sid:200006242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rtxknqlddf.duckdns.org",nocase; classtype:attempted-recon; sid:200006243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ruadgzvyrh.duckdns.org",nocase; classtype:attempted-recon; sid:200006244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ruls463256.sapm183.repl.co",nocase; classtype:attempted-recon; sid:200006245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"runnygrippingbrowsers.pedroelias23.repl.co",nocase; classtype:attempted-recon; sid:200006246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ruralshop.com",nocase; classtype:attempted-recon; sid:200006247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rust-drops.com",nocase; classtype:attempted-recon; sid:200006248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rususia.weebly.com",nocase; classtype:attempted-recon; sid:200006249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rvdqxxfngm.duckdns.org",nocase; classtype:attempted-recon; sid:200006250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rvpnwdrjok.duckdns.org",nocase; classtype:attempted-recon; sid:200006251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ryr-ingelectric.cl",nocase; classtype:attempted-recon; sid:200006252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rywtryteew.web.app",nocase; classtype:attempted-recon; sid:200006253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rzo478t7.hyperphp.com",nocase; classtype:attempted-recon; sid:200006254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s-fa31f3-i.sgizmo.com",nocase; classtype:attempted-recon; sid:200006255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.free.fr",nocase; classtype:attempted-recon; sid:200006256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.yam.com",nocase; classtype:attempted-recon; sid:200006257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s104318.gridserver.com",nocase; classtype:attempted-recon; sid:200006258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s117.panelboxmanager.com",nocase; classtype:attempted-recon; sid:200006259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s2.orl-pl.us",nocase; classtype:attempted-recon; sid:200006260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s23.proserv.ge",nocase; classtype:attempted-recon; sid:200006261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s3.orl-pl.us",nocase; classtype:attempted-recon; sid:200006262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s4f3tys1g-c0mf0rt.000webhostapp.com",nocase; classtype:attempted-recon; sid:200006263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s5r7pt.webwave.dev",nocase; classtype:attempted-recon; sid:200006264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sabadellpagofacil.com",nocase; classtype:attempted-recon; sid:200006265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sacmhs.org",nocase; classtype:attempted-recon; sid:200006266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sadervoyages.intnet.mu",nocase; classtype:attempted-recon; sid:200006267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sadindolentspreadsheets.pogaliciaarg.repl.co",nocase; classtype:attempted-recon; sid:200006268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sadqwee-b95870.ingress-comporellon.ewp.live",nocase; classtype:attempted-recon; sid:200006269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saeisocen.scaseeoe.01ov.top",nocase; classtype:attempted-recon; sid:200006270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"safemoonstk.com",nocase; classtype:attempted-recon; sid:200006271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"safety-amfc.web.app",nocase; classtype:attempted-recon; sid:200006272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"safraempresas.com.br.mcas-df.ms",nocase; classtype:attempted-recon; sid:200006273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"safty.summarycheck.workers.dev",nocase; classtype:attempted-recon; sid:200006274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sahleymadison.com",nocase; classtype:attempted-recon; sid:200006275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saika69sex.monster",nocase; classtype:attempted-recon; sid:200006276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saintbarkleyshoes.com",nocase; classtype:attempted-recon; sid:200006277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saitadobrasil.com.br",nocase; classtype:attempted-recon; sid:200006278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"salamalands.com",nocase; classtype:attempted-recon; sid:200006279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saldanaca.com",nocase; classtype:attempted-recon; sid:200006280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saliksnas.lojaintegrada.com.br",nocase; classtype:attempted-recon; sid:200006281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"salmanfarsi01.github.io",nocase; classtype:attempted-recon; sid:200006282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saloongkum.lpru.ac.th",nocase; classtype:attempted-recon; sid:200006283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"salty-quill-kale.glitch.me",nocase; classtype:attempted-recon; sid:200006284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"samlikanada.it",nocase; classtype:attempted-recon; sid:200006285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"samrockchem.com",nocase; classtype:attempted-recon; sid:200006286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"samvision.com.tr",nocase; classtype:attempted-recon; sid:200006287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"samvoktor.com",nocase; classtype:attempted-recon; sid:200006288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"san-dbox-home-lojaprincipessa.blogspot.com",nocase; classtype:attempted-recon; sid:200006289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sanatanastrology.com",nocase; classtype:attempted-recon; sid:200006290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sandalychacosklep.com",nocase; classtype:attempted-recon; sid:200006291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sandbox.the-cave.co.uk",nocase; classtype:attempted-recon; sid:200006292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sandeeppk03.github.io",nocase; classtype:attempted-recon; sid:200006293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sandersonphotosonline.com",nocase; classtype:attempted-recon; sid:200006294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sandyandkristin.com",nocase; classtype:attempted-recon; sid:200006295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sanjanapai.com",nocase; classtype:attempted-recon; sid:200006296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sanjilkumar.com",nocase; classtype:attempted-recon; sid:200006297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sankyo-m.jp",nocase; classtype:attempted-recon; sid:200006298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"santa565sac.ultimatefreehost.in",nocase; classtype:attempted-recon; sid:200006299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"santander-verified.com",nocase; classtype:attempted-recon; sid:200006300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sarratillo.com",nocase; classtype:attempted-recon; sid:200006301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sartorioesilva.com.br",nocase; classtype:attempted-recon; sid:200006302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sassy-diagnostic-terrier.glitch.me",nocase; classtype:attempted-recon; sid:200006303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"satay-secur.reconfimations.pagedisabled.workers.dev",nocase; classtype:attempted-recon; sid:200006304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"satisfiednaivelist.jisus2019.repl.co",nocase; classtype:attempted-recon; sid:200006305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"savingsfordentalcare.com",nocase; classtype:attempted-recon; sid:200006306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"savvycraftymom.com",nocase; classtype:attempted-recon; sid:200006307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sbcglobalonlineverificationupdate3.yolasite.com",nocase; classtype:attempted-recon; sid:200006308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sbs-siebanlagen.de",nocase; classtype:attempted-recon; sid:200006309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sc-01111000.ihostfull.com",nocase; classtype:attempted-recon; sid:200006310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scanoffice365-owa4874.microsoft365scan.workers.dev",nocase; classtype:attempted-recon; sid:200006311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scaredclearcus354x8a.jugeaq6a2.repl.co",nocase; classtype:attempted-recon; sid:200006312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scaseros.filesusr.com",nocase; classtype:attempted-recon; sid:200006313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sceiplc.com",nocase; classtype:attempted-recon; sid:200006314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scfbn.dq6037.cn",nocase; classtype:attempted-recon; sid:200006315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scfelgukbt.duckdns.org",nocase; classtype:attempted-recon; sid:200006316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scfg.qqnnq.cn",nocase; classtype:attempted-recon; sid:200006317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scfgg.bsyhart.cn",nocase; classtype:attempted-recon; sid:200006318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scfgg.hnqszjw.cn",nocase; classtype:attempted-recon; sid:200006319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scgbb.ruideconsultation.cn",nocase; classtype:attempted-recon; sid:200006320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scggh.sunshineseeds.cn",nocase; classtype:attempted-recon; sid:200006321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"schbh.chenkaicpa.cn",nocase; classtype:attempted-recon; sid:200006322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"schmittner.us",nocase; classtype:attempted-recon; sid:200006323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"school.greenislandtrust.org",nocase; classtype:attempted-recon; sid:200006324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sclbtvvmiw.duckdns.org",nocase; classtype:attempted-recon; sid:200006325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sclswisscom.flazio.com",nocase; classtype:attempted-recon; sid:200006326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scnrcxjjvb.duckdns.org",nocase; classtype:attempted-recon; sid:200006327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sco1992999.ultimatefreehost.in",nocase; classtype:attempted-recon; sid:200006328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scpcrrvwjm.duckdns.org",nocase; classtype:attempted-recon; sid:200006329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scrty.cold-thunder-d531.siteacn.workers.dev",nocase; classtype:attempted-recon; sid:200006330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdff.5204h.cn",nocase; classtype:attempted-recon; sid:200006331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdfffg.tgcwservice.cn",nocase; classtype:attempted-recon; sid:200006332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdffgg.vgyn1m.cn",nocase; classtype:attempted-recon; sid:200006333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdffsf.hyperphp.com",nocase; classtype:attempted-recon; sid:200006334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdfg.hzfsmyb.cn",nocase; classtype:attempted-recon; sid:200006335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdfgg.ishpkda.cn",nocase; classtype:attempted-recon; sid:200006336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdfjj.djxdjju.cn",nocase; classtype:attempted-recon; sid:200006337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdgh765.hostfree.pw",nocase; classtype:attempted-recon; sid:200006338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdgvsdvsdvs.blogspot.com",nocase; classtype:attempted-recon; sid:200006339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdvd.66726.cn",nocase; classtype:attempted-recon; sid:200006340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seabnb.ca",nocase; classtype:attempted-recon; sid:200006341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seafooddeliveryapp.com",nocase; classtype:attempted-recon; sid:200006342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seal-app-k2wcm.ondigitalocean.app",nocase; classtype:attempted-recon; sid:200006343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sebat-dhl.blogspot.com",nocase; classtype:attempted-recon; sid:200006344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sebene27.github.io",nocase; classtype:attempted-recon; sid:200006345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-alpha-497da0be515757web.gidiagents.com",nocase; classtype:attempted-recon; sid:200006346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-code-project.reseeoniwean.workers.dev",nocase; classtype:attempted-recon; sid:200006347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-dashlane.com",nocase; classtype:attempted-recon; sid:200006348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-document-project.ereoveisnot.workers.dev",nocase; classtype:attempted-recon; sid:200006349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-invent.pages.dev",nocase; classtype:attempted-recon; sid:200006350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-login.alamisharia.co.id",nocase; classtype:attempted-recon; sid:200006351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-office365-onmicr0000.myportfolio.com",nocase; classtype:attempted-recon; sid:200006352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-reconnect.dinamic-ourtime.workers.dev",nocase; classtype:attempted-recon; sid:200006353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-runescape.xgm.rnp.mybluehost.me",nocase; classtype:attempted-recon; sid:200006354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-sligth-document.ertoolfo.workers.dev",nocase; classtype:attempted-recon; sid:200006355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-ups-canada.com",nocase; classtype:attempted-recon; sid:200006356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.oldschool.com-rs.cz",nocase; classtype:attempted-recon; sid:200006357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.oldschool.com-v.cz",nocase; classtype:attempted-recon; sid:200006358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.runescope.com-as.cz",nocase; classtype:attempted-recon; sid:200006359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.staman.direct.quickconnect.to",nocase; classtype:attempted-recon; sid:200006360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure01mtb.com",nocase; classtype:attempted-recon; sid:200006361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure318.inmotionhosting.com",nocase; classtype:attempted-recon; sid:200006362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure55.webhostinghub.com",nocase; classtype:attempted-recon; sid:200006363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securebt.webflow.io",nocase; classtype:attempted-recon; sid:200006364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securechaser122.000webhostapp.com",nocase; classtype:attempted-recon; sid:200006365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securecuserver.co.uk",nocase; classtype:attempted-recon; sid:200006366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secured-message.outlook10.workers.dev",nocase; classtype:attempted-recon; sid:200006367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secured-message1.outlook10.workers.dev",nocase; classtype:attempted-recon; sid:200006368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securedocs-office365-onmicro000.myportfolio.com",nocase; classtype:attempted-recon; sid:200006369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securedropbox.serveirc.com",nocase; classtype:attempted-recon; sid:200006370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securefile.jennitai.workers.dev",nocase; classtype:attempted-recon; sid:200006371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securegateway-ovhcloud.csl-sl.de",nocase; classtype:attempted-recon; sid:200006372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secureintlpp.my.id",nocase; classtype:attempted-recon; sid:200006373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securep.dns2.us",nocase; classtype:attempted-recon; sid:200006374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secures13-ameli.fr",nocase; classtype:attempted-recon; sid:200006375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secures2-sfr.fr",nocase; classtype:attempted-recon; sid:200006376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securetdf-iverify.duckdns.org",nocase; classtype:attempted-recon; sid:200006377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secureus.top",nocase; classtype:attempted-recon; sid:200006378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securi-amfcu.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securite-particulier-sg.fr",nocase; classtype:attempted-recon; sid:200006380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"security-3000000032145697468461.tk",nocase; classtype:attempted-recon; sid:200006381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"security-3000000032145697468462.tk",nocase; classtype:attempted-recon; sid:200006382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"security-3000000032145697468463.tk",nocase; classtype:attempted-recon; sid:200006383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"security-3000000032145697468464.tk",nocase; classtype:attempted-recon; sid:200006384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"security-3000000032145697468465.tk",nocase; classtype:attempted-recon; sid:200006385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"security-3000000032145697468468.tk",nocase; classtype:attempted-recon; sid:200006386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"security-3000000032145697468469.tk",nocase; classtype:attempted-recon; sid:200006387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"security-millennium.com",nocase; classtype:attempted-recon; sid:200006388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"security-page-community-standards.blogspot.com",nocase; classtype:attempted-recon; sid:200006389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securityaccountprotection32564.rf.gd",nocase; classtype:attempted-recon; sid:200006390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securityalert.bancaenlineabof.repl.co",nocase; classtype:attempted-recon; sid:200006391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securityexit.260mb.net",nocase; classtype:attempted-recon; sid:200006392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securityxz.co.vu",nocase; classtype:attempted-recon; sid:200006393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sedekahchip.my.id",nocase; classtype:attempted-recon; sid:200006394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sedekahchip1-5b.com",nocase; classtype:attempted-recon; sid:200006395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sedekahleonnn.com",nocase; classtype:attempted-recon; sid:200006396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seehere.trainercentral.com",nocase; classtype:attempted-recon; sid:200006397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seelenpark.com",nocase; classtype:attempted-recon; sid:200006398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seg.lhiqmv.cn",nocase; classtype:attempted-recon; sid:200006399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"segubisa.0hi.me",nocase; classtype:attempted-recon; sid:200006400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguimiento-correos-express-98da89.ingress-erytho.ewp.live",nocase; classtype:attempted-recon; sid:200006401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"segunda-serve.blogspot.com",nocase; classtype:attempted-recon; sid:200006402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguridad.bancogaliciahr.repl.co",nocase; classtype:attempted-recon; sid:200006403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguridad.galiciam.repl.co",nocase; classtype:attempted-recon; sid:200006404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguridad02662.webcindario.com",nocase; classtype:attempted-recon; sid:200006405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguridad0662.webcindario.com",nocase; classtype:attempted-recon; sid:200006406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguridad902290.webcindario.com",nocase; classtype:attempted-recon; sid:200006407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguridad904490.webcindario.com",nocase; classtype:attempted-recon; sid:200006408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguridad9097.webcindario.com",nocase; classtype:attempted-recon; sid:200006409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguridadbakingglicrar.company2654.repl.co",nocase; classtype:attempted-recon; sid:200006410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguritybroucaso23.sueguritiy.repl.co",nocase; classtype:attempted-recon; sid:200006411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguritybroucasos.toti444335.repl.co",nocase; classtype:attempted-recon; sid:200006412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguroitservices.com",nocase; classtype:attempted-recon; sid:200006413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguronacionalcr.ultimatefreehost.in",nocase; classtype:attempted-recon; sid:200006414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguropagoapp.hostfree.pw",nocase; classtype:attempted-recon; sid:200006415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguroyrapido.ihelpup.repl.co",nocase; classtype:attempted-recon; sid:200006416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sejsloao6181.liveblog365.com",nocase; classtype:attempted-recon; sid:200006417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"selecciondepuesto.webnode.es",nocase; classtype:attempted-recon; sid:200006418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"select-a-cleaner.com",nocase; classtype:attempted-recon; sid:200006419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"selfrelia.userhksjhas.repl.co",nocase; classtype:attempted-recon; sid:200006420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"semanadeouromagalu.com",nocase; classtype:attempted-recon; sid:200006421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"semanario7dias.com",nocase; classtype:attempted-recon; sid:200006422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sending-vihted.8544436.xyz",nocase; classtype:attempted-recon; sid:200006423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sensdapps.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sensdapps.web.app",nocase; classtype:attempted-recon; sid:200006425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sentimentalusableoctal.galiicliag.repl.co",nocase; classtype:attempted-recon; sid:200006426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seoservicesiox.web.app",nocase; classtype:attempted-recon; sid:200006427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sep2020.sarsk.net",nocase; classtype:attempted-recon; sid:200006428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"serch26.biz",nocase; classtype:attempted-recon; sid:200006429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sereneinfantiledigits.inforbancolom.repl.co",nocase; classtype:attempted-recon; sid:200006430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seriousgregariousautocad.segurity200.repl.co",nocase; classtype:attempted-recon; sid:200006431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"serpienteonline.com",nocase; classtype:attempted-recon; sid:200006432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sertyxese.myfreesites.net",nocase; classtype:attempted-recon; sid:200006433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"serv0spk.de",nocase; classtype:attempted-recon; sid:200006434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servece2.x10.mx",nocase; classtype:attempted-recon; sid:200006435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servece233.x10.mx",nocase; classtype:attempted-recon; sid:200006436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server-0-x.web.app",nocase; classtype:attempted-recon; sid:200006437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server-data-20d8d.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server-data-20d8d.web.app",nocase; classtype:attempted-recon; sid:200006439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server-networksolutions.web.app",nocase; classtype:attempted-recon; sid:200006440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servertechnicalnoticeimmestae-reconecting.pages.dev",nocase; classtype:attempted-recon; sid:200006441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servic-4096.awuqohsjo9847.workers.dev",nocase; classtype:attempted-recon; sid:200006442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servic.br0um2.repl.co",nocase; classtype:attempted-recon; sid:200006443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"service-en-ligne-1-b95579.ingress-comporellon.ewp.live",nocase; classtype:attempted-recon; sid:200006444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"service-info1.yolasite.com",nocase; classtype:attempted-recon; sid:200006445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"service-pidviewnet01.xyz",nocase; classtype:attempted-recon; sid:200006446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"service-pudvuewnet01.xyz",nocase; classtype:attempted-recon; sid:200006447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"serviceadhelpmeta.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"serviceadhelpmeta.web.app",nocase; classtype:attempted-recon; sid:200006449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicedesk-microsoft.com",nocase; classtype:attempted-recon; sid:200006450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicefbhelpmeta.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicefbhelpmeta.web.app",nocase; classtype:attempted-recon; sid:200006452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicehelp-metaa.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicehelp-metaa.web.app",nocase; classtype:attempted-recon; sid:200006454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"serviceid-jaacscaa1.xyz",nocase; classtype:attempted-recon; sid:200006455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicepage.service-page.workers.dev",nocase; classtype:attempted-recon; sid:200006456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicepublics.info",nocase; classtype:attempted-recon; sid:200006457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"services-lnfoguide.de",nocase; classtype:attempted-recon; sid:200006458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"services.oldschool.com-as.cz",nocase; classtype:attempted-recon; sid:200006459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicesbancaire.com",nocase; classtype:attempted-recon; sid:200006460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"serviceschannel.info",nocase; classtype:attempted-recon; sid:200006461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"serviceupdatexatt.weebly.com",nocase; classtype:attempted-recon; sid:200006462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicio-cliente-santdr-b8ca53.ingress-comporellon.ewp.live",nocase; classtype:attempted-recon; sid:200006463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicioalclientebn.com",nocase; classtype:attempted-recon; sid:200006464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicios-virtuales.usuariosebrou.repl.co",nocase; classtype:attempted-recon; sid:200006465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicios.galiciahe.repl.co",nocase; classtype:attempted-recon; sid:200006466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicomconstrucciones.com",nocase; classtype:attempted-recon; sid:200006467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servics.validationsecuradm.workers.dev",nocase; classtype:attempted-recon; sid:200006468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servisaludec.com",nocase; classtype:attempted-recon; sid:200006469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"serviziompsienastorno.com",nocase; classtype:attempted-recon; sid:200006470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"setda.tabalongkab.go.id",nocase; classtype:attempted-recon; sid:200006471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"setupmynorton.square.site",nocase; classtype:attempted-recon; sid:200006472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"setupyouraccounts.com",nocase; classtype:attempted-recon; sid:200006473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seul.unilurio.ac.mz",nocase; classtype:attempted-recon; sid:200006474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sezionecarte.com",nocase; classtype:attempted-recon; sid:200006475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfc.com.vn",nocase; classtype:attempted-recon; sid:200006476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfdpkpjqmi.duckdns.org",nocase; classtype:attempted-recon; sid:200006477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfege.dtszyy.cn",nocase; classtype:attempted-recon; sid:200006478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfffg.yychxkj.cn",nocase; classtype:attempted-recon; sid:200006479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sffg.jjzzj.cn",nocase; classtype:attempted-recon; sid:200006480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfgg.zgzzgg.cn",nocase; classtype:attempted-recon; sid:200006481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfggh.qqhhq.cn",nocase; classtype:attempted-recon; sid:200006482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfgh.hsgfchffy.cn",nocase; classtype:attempted-recon; sid:200006483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfgh.llnnm.cn",nocase; classtype:attempted-recon; sid:200006484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfgh.wwkwj.cn",nocase; classtype:attempted-recon; sid:200006485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfghj.1104qp.cn",nocase; classtype:attempted-recon; sid:200006486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfr-mesfactures.app",nocase; classtype:attempted-recon; sid:200006487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfr.filesusr.com",nocase; classtype:attempted-recon; sid:200006488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfrpanel.lws.fr",nocase; classtype:attempted-recon; sid:200006489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfwttqmepk.duckdns.org",nocase; classtype:attempted-recon; sid:200006490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfxsdf.hyperphp.com",nocase; classtype:attempted-recon; sid:200006491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgauth.practical-lovelace.34-125-203-80.plesk.page",nocase; classtype:attempted-recon; sid:200006492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgauthweb.practical-lovelace.34-125-203-80.plesk.page",nocase; classtype:attempted-recon; sid:200006493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgcontrol-b85204.ingress-comporellon.ewp.live",nocase; classtype:attempted-recon; sid:200006494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgghh.0nnjmvn.cn",nocase; classtype:attempted-recon; sid:200006495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgghh.mppuubj.cn",nocase; classtype:attempted-recon; sid:200006496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgghh.soxcghw.cn",nocase; classtype:attempted-recon; sid:200006497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgghj.ojkfqdo.cn",nocase; classtype:attempted-recon; sid:200006498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgtbalde991-dot-still-dynamics-321006.ue.r.appspot.com",nocase; classtype:attempted-recon; sid:200006499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgvgg.jiameng178.cn",nocase; classtype:attempted-recon; sid:200006500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sh.mfuture.co",nocase; classtype:attempted-recon; sid:200006501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sh3772901.c.had.su",nocase; classtype:attempted-recon; sid:200006502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shahjeepsh.com.pk",nocase; classtype:attempted-recon; sid:200006503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shahjis.com",nocase; classtype:attempted-recon; sid:200006504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shakinbeef.com.au",nocase; classtype:attempted-recon; sid:200006505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shanky0.github.io",nocase; classtype:attempted-recon; sid:200006506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-eu1.hsforms.com",nocase; classtype:attempted-recon; sid:200006507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-drive-device-local-disk.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-drive-device-local-disk.web.app",nocase; classtype:attempted-recon; sid:200006509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-login-pdf.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-login-pdf.web.app",nocase; classtype:attempted-recon; sid:200006511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-view-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-view-folder.web.app",nocase; classtype:attempted-recon; sid:200006513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share.ebforms.com",nocase; classtype:attempted-recon; sid:200006514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-cloud-preview.post-confirmation.workers.dev",nocase; classtype:attempted-recon; sid:200006515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-cloud-project.reading-voicee.workers.dev",nocase; classtype:attempted-recon; sid:200006516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-email-files.documents-project.workers.dev",nocase; classtype:attempted-recon; sid:200006517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-files.dhaafand.workers.dev",nocase; classtype:attempted-recon; sid:200006518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-files.messseg.workers.dev",nocase; classtype:attempted-recon; sid:200006519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-folder-private.nhilenhil.workers.dev",nocase; classtype:attempted-recon; sid:200006520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-private-folder.head-chat.workers.dev",nocase; classtype:attempted-recon; sid:200006521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-private.files-auuth.workers.dev",nocase; classtype:attempted-recon; sid:200006522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-private.voicee-security.workers.dev",nocase; classtype:attempted-recon; sid:200006523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared.0294823229453195849205827592018491.workers.dev",nocase; classtype:attempted-recon; sid:200006524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared.privatte-document.workers.dev",nocase; classtype:attempted-recon; sid:200006525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shareddocumentt.mystrikingly.com",nocase; classtype:attempted-recon; sid:200006526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharedfax815201376.wordpress.com",nocase; classtype:attempted-recon; sid:200006527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharedfiles.officesharedfile5be386971041e60c041f4217230df1b2.workers.dev",nocase; classtype:attempted-recon; sid:200006528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharedonline.myportfolio.com",nocase; classtype:attempted-recon; sid:200006529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharefilepoints343.myportfolio.com",nocase; classtype:attempted-recon; sid:200006530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharepoint.hi-old.workers.dev",nocase; classtype:attempted-recon; sid:200006531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharepoint.timelessincome.com",nocase; classtype:attempted-recon; sid:200006532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharepointdocsecure.myportfolio.com",nocase; classtype:attempted-recon; sid:200006533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharepointdrives6352.myportfolio.com",nocase; classtype:attempted-recon; sid:200006534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharepointoffice-365.myportfolio.com",nocase; classtype:attempted-recon; sid:200006535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharepointsviewoffficer.myportfolio.com",nocase; classtype:attempted-recon; sid:200006536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharepointvi726.myportfolio.com",nocase; classtype:attempted-recon; sid:200006537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaza6259.github.io",nocase; classtype:attempted-recon; sid:200006538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shee35.pages.dev",nocase; classtype:attempted-recon; sid:200006539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sheet.invoice-remit-advance.workers.dev",nocase; classtype:attempted-recon; sid:200006540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sheevdbkky.duckdns.org",nocase; classtype:attempted-recon; sid:200006541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sheinimporter.com",nocase; classtype:attempted-recon; sid:200006542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sheinnshop.com",nocase; classtype:attempted-recon; sid:200006543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sheinpromo.company.site",nocase; classtype:attempted-recon; sid:200006544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sherhan.kz",nocase; classtype:attempted-recon; sid:200006545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shf-us.com",nocase; classtype:attempted-recon; sid:200006546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shikimei.jp",nocase; classtype:attempted-recon; sid:200006547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shiny-sound-a24a.rcvrysrvce.workers.dev",nocase; classtype:attempted-recon; sid:200006548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shipment-post-at.apolline-voyance.com",nocase; classtype:attempted-recon; sid:200006549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shop.cmfurnituremall.com",nocase; classtype:attempted-recon; sid:200006550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shop.fixyourdirtbike.com",nocase; classtype:attempted-recon; sid:200006551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shopeecoins.blogspot.com",nocase; classtype:attempted-recon; sid:200006552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shopeeday2022.blogspot.com",nocase; classtype:attempted-recon; sid:200006553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shopfrontservices.coffeecup.com",nocase; classtype:attempted-recon; sid:200006554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shopping-vihted.7654378.xyz",nocase; classtype:attempted-recon; sid:200006555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shopvinted-pay.7890342.xyz",nocase; classtype:attempted-recon; sid:200006556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"short.mypaste.fun",nocase; classtype:attempted-recon; sid:200006557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"short.upm.es",nocase; classtype:attempted-recon; sid:200006558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shorturl-ddc.moph.go.th",nocase; classtype:attempted-recon; sid:200006559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shorturl.ac",nocase; classtype:attempted-recon; sid:200006560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shreebuildcon.in",nocase; classtype:attempted-recon; sid:200006561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shrill-flower-70e7.wearesre.workers.dev",nocase; classtype:attempted-recon; sid:200006562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shrill-waterfall-e99f.mooreslaw.workers.dev",nocase; classtype:attempted-recon; sid:200006563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shrill.nxazenom.workers.dev",nocase; classtype:attempted-recon; sid:200006564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shuangximeishu.com",nocase; classtype:attempted-recon; sid:200006565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shuixshuu.ml",nocase; classtype:attempted-recon; sid:200006566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shuswapp.com",nocase; classtype:attempted-recon; sid:200006567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shutterislandsid2.blogspot.com",nocase; classtype:attempted-recon; sid:200006568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shutterislandsid4.blogspot.com",nocase; classtype:attempted-recon; sid:200006569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siapujian.salatiga.go.id",nocase; classtype:attempted-recon; sid:200006570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siayu.indramayukab.go.id",nocase; classtype:attempted-recon; sid:200006571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sibiecsy-online.preview-domain.com",nocase; classtype:attempted-recon; sid:200006572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siedehaus.de",nocase; classtype:attempted-recon; sid:200006573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sigce107655.weeblysite.com",nocase; classtype:attempted-recon; sid:200006574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sign-in-info.sumitomomitsui.shop",nocase; classtype:attempted-recon; sid:200006575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sign-in-info.sumitomomitsui.top",nocase; classtype:attempted-recon; sid:200006576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sign-in-info.vdafa62afa.top",nocase; classtype:attempted-recon; sid:200006577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sign-in-verification-929bb.web.app",nocase; classtype:attempted-recon; sid:200006578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"signedlines.wavoto.com",nocase; classtype:attempted-recon; sid:200006579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sigulemada.web.app",nocase; classtype:attempted-recon; sid:200006580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sigzcyfcfr.duckdns.org",nocase; classtype:attempted-recon; sid:200006581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"silent-firefly-5561.on.fleek.co",nocase; classtype:attempted-recon; sid:200006582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"silent-snowflake-0170.signeddocs.workers.dev",nocase; classtype:attempted-recon; sid:200006583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siliconescuritiba.com.br",nocase; classtype:attempted-recon; sid:200006584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"simgeprek.blitarkota.go.id",nocase; classtype:attempted-recon; sid:200006585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"simiandme.com",nocase; classtype:attempted-recon; sid:200006586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"similemweb14.ga",nocase; classtype:attempted-recon; sid:200006587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"simplissimot.com",nocase; classtype:attempted-recon; sid:200006588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"simplybeyoutiful.org",nocase; classtype:attempted-recon; sid:200006589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"simranarts.com",nocase; classtype:attempted-recon; sid:200006590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sindemail.com",nocase; classtype:attempted-recon; sid:200006591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sinergy.io",nocase; classtype:attempted-recon; sid:200006592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sinren.com.tw",nocase; classtype:attempted-recon; sid:200006593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sipclakqtd.duckdns.org",nocase; classtype:attempted-recon; sid:200006594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siporados15585.blogspot.com",nocase; classtype:attempted-recon; sid:200006595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sisale.2022outletsdiscount.ru",nocase; classtype:attempted-recon; sid:200006596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sisibwumur.duckdns.org",nocase; classtype:attempted-recon; sid:200006597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sistemasoportede.bancaebrou.repl.co",nocase; classtype:attempted-recon; sid:200006598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sistemaverde.cl",nocase; classtype:attempted-recon; sid:200006599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sistemel.com",nocase; classtype:attempted-recon; sid:200006600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site-4403463-3995-6112.mystrikingly.com",nocase; classtype:attempted-recon; sid:200006601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9423623.92.webydo.com",nocase; classtype:attempted-recon; sid:200006602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9434107.92.webydo.com",nocase; classtype:attempted-recon; sid:200006603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9548676.92.webydo.com",nocase; classtype:attempted-recon; sid:200006604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9552191.92.webydo.com",nocase; classtype:attempted-recon; sid:200006605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9606042.92.webydo.com",nocase; classtype:attempted-recon; sid:200006606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9607677.92.webydo.com",nocase; classtype:attempted-recon; sid:200006607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9608556.92.webydo.com",nocase; classtype:attempted-recon; sid:200006608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder157806.dynadot.com",nocase; classtype:attempted-recon; sid:200006609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder159641.dynadot.com",nocase; classtype:attempted-recon; sid:200006610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder161703.dynadot.com",nocase; classtype:attempted-recon; sid:200006611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder162459.dynadot.com",nocase; classtype:attempted-recon; sid:200006612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder162846.dynadot.com",nocase; classtype:attempted-recon; sid:200006613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder163125.dynadot.com",nocase; classtype:attempted-recon; sid:200006614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder163841.dynadot.com",nocase; classtype:attempted-recon; sid:200006615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder165325.dynadot.com",nocase; classtype:attempted-recon; sid:200006616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder165385.dynadot.com",nocase; classtype:attempted-recon; sid:200006617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder165745.dynadot.com",nocase; classtype:attempted-recon; sid:200006618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder167178.dynadot.com",nocase; classtype:attempted-recon; sid:200006619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder170515.dynadot.com",nocase; classtype:attempted-recon; sid:200006620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder170603.dynadot.com",nocase; classtype:attempted-recon; sid:200006621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder170875.dynadot.com",nocase; classtype:attempted-recon; sid:200006622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder171050.dynadot.com",nocase; classtype:attempted-recon; sid:200006623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder171156.dynadot.com",nocase; classtype:attempted-recon; sid:200006624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder171220.dynadot.com",nocase; classtype:attempted-recon; sid:200006625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder171269.dynadot.com",nocase; classtype:attempted-recon; sid:200006626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder171476.dynadot.com",nocase; classtype:attempted-recon; sid:200006627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder171681.dynadot.com",nocase; classtype:attempted-recon; sid:200006628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder171774.dynadot.com",nocase; classtype:attempted-recon; sid:200006629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder171775.dynadot.com",nocase; classtype:attempted-recon; sid:200006630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder171864.dynadot.com",nocase; classtype:attempted-recon; sid:200006631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder172150.dynadot.com",nocase; classtype:attempted-recon; sid:200006632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder172159.dynadot.com",nocase; classtype:attempted-recon; sid:200006633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder172173.dynadot.com",nocase; classtype:attempted-recon; sid:200006634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder172188.dynadot.com",nocase; classtype:attempted-recon; sid:200006635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder172240.dynadot.com",nocase; classtype:attempted-recon; sid:200006636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder172579.dynadot.com",nocase; classtype:attempted-recon; sid:200006637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder172593.dynadot.com",nocase; classtype:attempted-recon; sid:200006638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder172763.dynadot.com",nocase; classtype:attempted-recon; sid:200006639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder172771.dynadot.com",nocase; classtype:attempted-recon; sid:200006640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder172784.dynadot.com",nocase; classtype:attempted-recon; sid:200006641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder172838.dynadot.com",nocase; classtype:attempted-recon; sid:200006642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder172939.dynadot.com",nocase; classtype:attempted-recon; sid:200006643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder173065.dynadot.com",nocase; classtype:attempted-recon; sid:200006644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder173103.dynadot.com",nocase; classtype:attempted-recon; sid:200006645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder173124.dynadot.com",nocase; classtype:attempted-recon; sid:200006646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder173127.dynadot.com",nocase; classtype:attempted-recon; sid:200006647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder173265.dynadot.com",nocase; classtype:attempted-recon; sid:200006648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder173326.dynadot.com",nocase; classtype:attempted-recon; sid:200006649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder173340.dynadot.com",nocase; classtype:attempted-recon; sid:200006650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitioseguroweb.sitioseguroweb.repl.co",nocase; classtype:attempted-recon; sid:200006651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sjrtp-proxy.marketopreview.com",nocase; classtype:attempted-recon; sid:200006652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sjwwjfsaje.duckdns.org",nocase; classtype:attempted-recon; sid:200006653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skimasters.ch",nocase; classtype:attempted-recon; sid:200006654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skinbid.biz.pl",nocase; classtype:attempted-recon; sid:200006655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skinbid.org.es",nocase; classtype:attempted-recon; sid:200006656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skinfullprice.com",nocase; classtype:attempted-recon; sid:200006657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skinnydcoffee.com",nocase; classtype:attempted-recon; sid:200006658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skipthaganes.com",nocase; classtype:attempted-recon; sid:200006659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skiqthegames.com",nocase; classtype:attempted-recon; sid:200006660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sklep.arturcislo.pl",nocase; classtype:attempted-recon; sid:200006661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sklepkody.pl",nocase; classtype:attempted-recon; sid:200006662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sky-authenticate.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sky-authenticate.web.app",nocase; classtype:attempted-recon; sid:200006664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skyblueenterprises.co",nocase; classtype:attempted-recon; sid:200006665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skyfixers.com",nocase; classtype:attempted-recon; sid:200006666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sl18839399.liveblog365.com",nocase; classtype:attempted-recon; sid:200006667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sleamcommnunity.net.ru",nocase; classtype:attempted-recon; sid:200006668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sleamcommunitiy.ru",nocase; classtype:attempted-recon; sid:200006669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sleepmaskz.com",nocase; classtype:attempted-recon; sid:200006670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sleepy-einstein.62-4-16-6.plesk.page",nocase; classtype:attempted-recon; sid:200006671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"slicktech8.com",nocase; classtype:attempted-recon; sid:200006672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"slidtrleca.duckdns.org",nocase; classtype:attempted-recon; sid:200006673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"slmkufeckf.jon-jensen.workers.dev",nocase; classtype:attempted-recon; sid:200006674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"slowlinebag.jp",nocase; classtype:attempted-recon; sid:200006675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"slutkissgirls.com",nocase; classtype:attempted-recon; sid:200006676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"slybwaveea.duckdns.org",nocase; classtype:attempted-recon; sid:200006677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sm777.csb.app",nocase; classtype:attempted-recon; sid:200006678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smal.lu",nocase; classtype:attempted-recon; sid:200006679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"small-dust-6c63.pontufbksd.workers.dev",nocase; classtype:attempted-recon; sid:200006680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smalltittube.com",nocase; classtype:attempted-recon; sid:200006681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smartbazaar.shop",nocase; classtype:attempted-recon; sid:200006682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smartbitesizedkeyboard.preapsfkapsop.repl.co",nocase; classtype:attempted-recon; sid:200006683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smartchaindefi.com",nocase; classtype:attempted-recon; sid:200006684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smartcointrading.xyz",nocase; classtype:attempted-recon; sid:200006685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smartgridsweek.com",nocase; classtype:attempted-recon; sid:200006686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smartmom.com.bd",nocase; classtype:attempted-recon; sid:200006687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smartsyncronization.com",nocase; classtype:attempted-recon; sid:200006688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smartyarts.net",nocase; classtype:attempted-recon; sid:200006689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smbc-card.autoglyph.cn",nocase; classtype:attempted-recon; sid:200006690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smbc.moasecsecsccrerd.kirzjuw.cn",nocase; classtype:attempted-recon; sid:200006691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smbc.moasecsecsccrerd.kkjhjry.cn",nocase; classtype:attempted-recon; sid:200006692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smbccard-jp.com",nocase; classtype:attempted-recon; sid:200006693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smepp.uninp.edu.rs",nocase; classtype:attempted-recon; sid:200006694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smgolamalif.github.io",nocase; classtype:attempted-recon; sid:200006695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smi.onlygfpics.com",nocase; classtype:attempted-recon; sid:200006696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smkkesehatanjember.sch.id",nocase; classtype:attempted-recon; sid:200006697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sml-bd.com",nocase; classtype:attempted-recon; sid:200006698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sml1s.hyperphp.com",nocase; classtype:attempted-recon; sid:200006699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sms-citizensbank.web.app",nocase; classtype:attempted-recon; sid:200006700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sms-revolut.com",nocase; classtype:attempted-recon; sid:200006701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smsenligne.myfreesites.net",nocase; classtype:attempted-recon; sid:200006702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smsmms.flazio.com",nocase; classtype:attempted-recon; sid:200006703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smsorangephonemail.myfreesites.net",nocase; classtype:attempted-recon; sid:200006704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smsorangesmsmessage.myfreesites.net",nocase; classtype:attempted-recon; sid:200006705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smsverificationmms.myfreesites.net",nocase; classtype:attempted-recon; sid:200006706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smzburkgbs.duckdns.org",nocase; classtype:attempted-recon; sid:200006707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sn-066660.ultimatefreehost.in",nocase; classtype:attempted-recon; sid:200006708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sn-28273739.ihostfull.com",nocase; classtype:attempted-recon; sid:200006709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sn0010192920.byethost5.com",nocase; classtype:attempted-recon; sid:200006710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sn01002900.byethost5.com",nocase; classtype:attempted-recon; sid:200006711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sn28393030.liveblog365.com",nocase; classtype:attempted-recon; sid:200006712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sn91892939.byethost15.com",nocase; classtype:attempted-recon; sid:200006713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"snazzy-tartufo-d3e570.netlify.app",nocase; classtype:attempted-recon; sid:200006714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"snbcvertess.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"snbcvertess.web.app",nocase; classtype:attempted-recon; sid:200006716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"snn919200390.liveblog365.com",nocase; classtype:attempted-recon; sid:200006717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"snowy-brook-6802.on.fleek.co",nocase; classtype:attempted-recon; sid:200006718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"snowy-sun-5b1e.tobyshan.workers.dev",nocase; classtype:attempted-recon; sid:200006719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"snowy-viol.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200006720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"snt-manometr.ru",nocase; classtype:attempted-recon; sid:200006721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sntveriflc4b4nc0lmb1a.bcdmmcld2.repl.co",nocase; classtype:attempted-recon; sid:200006722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"so932809.webcindario.com",nocase; classtype:attempted-recon; sid:200006723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sobresercorpo.com.br",nocase; classtype:attempted-recon; sid:200006724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"socialaccountsseller.xyz",nocase; classtype:attempted-recon; sid:200006725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"socialnear.com",nocase; classtype:attempted-recon; sid:200006726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"societe-generale-login.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"societe-generale-login.web.app",nocase; classtype:attempted-recon; sid:200006728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sofe-firma.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soft-cell-8148.updateloginprogram.workers.dev",nocase; classtype:attempted-recon; sid:200006730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soft-paper-3207.on.fleek.co",nocase; classtype:attempted-recon; sid:200006731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sol-community.com",nocase; classtype:attempted-recon; sid:200006732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sol-refund.com",nocase; classtype:attempted-recon; sid:200006733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solana-drop.info",nocase; classtype:attempted-recon; sid:200006734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solanaforfree.top",nocase; classtype:attempted-recon; sid:200006735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solanagrow.net",nocase; classtype:attempted-recon; sid:200006736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solanahackerhouse.com",nocase; classtype:attempted-recon; sid:200006737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solanatimes.io",nocase; classtype:attempted-recon; sid:200006738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solanaverse.info",nocase; classtype:attempted-recon; sid:200006739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soliascan.work",nocase; classtype:attempted-recon; sid:200006740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solicita-tucredito.com",nocase; classtype:attempted-recon; sid:200006741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solicitaloporestemes.com",nocase; classtype:attempted-recon; sid:200006742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solicitudprestamoalinstante-lbkperu.com",nocase; classtype:attempted-recon; sid:200006743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solitar.tempetahu.workers.dev",nocase; classtype:attempted-recon; sid:200006744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solitary-butterfly-f885.execuisine672.workers.dev",nocase; classtype:attempted-recon; sid:200006745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solucao-para-todos.com",nocase; classtype:attempted-recon; sid:200006746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solucaodigital-online.blogspot.com",nocase; classtype:attempted-recon; sid:200006747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solucaodigitalmaio.com",nocase; classtype:attempted-recon; sid:200006748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solucionesach.com",nocase; classtype:attempted-recon; sid:200006749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solucoes-para-nos.com",nocase; classtype:attempted-recon; sid:200006750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solucoesr3.sslblindado.com",nocase; classtype:attempted-recon; sid:200006751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"somethingmoreconference.com",nocase; classtype:attempted-recon; sid:200006752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sopac.org.py",nocase; classtype:attempted-recon; sid:200006753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sopbant44546.webcindario.com",nocase; classtype:attempted-recon; sid:200006754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sopo4873298.webcindario.com",nocase; classtype:attempted-recon; sid:200006755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soporte-alp.info",nocase; classtype:attempted-recon; sid:200006756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soporte.bankin1.repl.co",nocase; classtype:attempted-recon; sid:200006757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soportebanco.webcindario.com",nocase; classtype:attempted-recon; sid:200006758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soportegalicia.infogalicia1.repl.co",nocase; classtype:attempted-recon; sid:200006759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soportegalicia.onlinebankin133.repl.co",nocase; classtype:attempted-recon; sid:200006760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soriimases.co.vu",nocase; classtype:attempted-recon; sid:200006761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sosfresh3sdf.webcindario.com",nocase; classtype:attempted-recon; sid:200006762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"souaxwaoh.myfreesites.net",nocase; classtype:attempted-recon; sid:200006763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soufsont.blogspot.com",nocase; classtype:attempted-recon; sid:200006764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soulbound.app",nocase; classtype:attempted-recon; sid:200006765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soumya252000.github.io",nocase; classtype:attempted-recon; sid:200006766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soupydarkorangepreprocessor.0nlinegalicia.repl.co",nocase; classtype:attempted-recon; sid:200006767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"southamerica-east1-clean-algebra-356021.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200006768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"southamerica-east1-hardy-magpie-334101.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200006769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"southamerica-east1-noted-minutia-330211.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200006770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"southamericansupplier.com",nocase; classtype:attempted-recon; sid:200006771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"southbaywedding.com",nocase; classtype:attempted-recon; sid:200006772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sp-ids.de",nocase; classtype:attempted-recon; sid:200006773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sp379189.sitebeat.crazydomains.com",nocase; classtype:attempted-recon; sid:200006774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sp477389.sitebeat.site",nocase; classtype:attempted-recon; sid:200006775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sp869496.sitebeat.crazydomains.com",nocase; classtype:attempted-recon; sid:200006776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spaiocy-priany-blools.yolasite.com",nocase; classtype:attempted-recon; sid:200006777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparka-bankberatern.com",nocase; classtype:attempted-recon; sid:200006778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparka-kundefiliale.com",nocase; classtype:attempted-recon; sid:200006779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparka-kundefilialen.com",nocase; classtype:attempted-recon; sid:200006780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparka-kundegewerbe.com",nocase; classtype:attempted-recon; sid:200006781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparka-kundehalter.com",nocase; classtype:attempted-recon; sid:200006782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparka-kundekredits.com",nocase; classtype:attempted-recon; sid:200006783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparka-kundelehre.com",nocase; classtype:attempted-recon; sid:200006784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparka-kundeleitzahl.com",nocase; classtype:attempted-recon; sid:200006785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparka-kundeleitzahlen.com",nocase; classtype:attempted-recon; sid:200006786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkase-einloggen.xyz",nocase; classtype:attempted-recon; sid:200006787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkase-hauptmenu.xyz",nocase; classtype:attempted-recon; sid:200006788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkasse-abfrage.online",nocase; classtype:attempted-recon; sid:200006789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkasse-aktualisierung.de",nocase; classtype:attempted-recon; sid:200006790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkasse-holstein.cloud",nocase; classtype:attempted-recon; sid:200006791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkasse-proton.de",nocase; classtype:attempted-recon; sid:200006792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkasse-sicherheit.org",nocase; classtype:attempted-recon; sid:200006793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkasse.allgemeine-geschaeftsbedinungen.info",nocase; classtype:attempted-recon; sid:200006794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkasse.de-server8.club",nocase; classtype:attempted-recon; sid:200006795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkassse-luebeck.com",nocase; classtype:attempted-recon; sid:200006796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkling-9123881273-paow0asxxa.netlify.app",nocase; classtype:attempted-recon; sid:200006797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkling-bar-cbbd.onedriveonline1617.workers.dev",nocase; classtype:attempted-recon; sid:200006798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkling-glitter-159f.scrtygdjahg.workers.dev",nocase; classtype:attempted-recon; sid:200006799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkling-rice-5e44.rockymtmgt969.workers.dev",nocase; classtype:attempted-recon; sid:200006800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkling-snow-d1b6.bluebemaseddsd.workers.dev",nocase; classtype:attempted-recon; sid:200006801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparklingmoccasinvideogame.onlinebankinguh.repl.co",nocase; classtype:attempted-recon; sid:200006802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkly-snickerdoodle-4a687f.netlify.app",nocase; classtype:attempted-recon; sid:200006803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparsemotionlessgzip.galiciiaars.repl.co",nocase; classtype:attempted-recon; sid:200006804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparxinteriors.co.zw",nocase; classtype:attempted-recon; sid:200006805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spedizionecard.com",nocase; classtype:attempted-recon; sid:200006806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spedizionepay.com",nocase; classtype:attempted-recon; sid:200006807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spemail5.online",nocase; classtype:attempted-recon; sid:200006808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spgltovoxq.web.app",nocase; classtype:attempted-recon; sid:200006809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spherefiinance.com",nocase; classtype:attempted-recon; sid:200006810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spincat.lucky-mint.live",nocase; classtype:attempted-recon; sid:200006811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spirecg.corsetul-boston.ro",nocase; classtype:attempted-recon; sid:200006812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spiritswap-gow.blogspot.com",nocase; classtype:attempted-recon; sid:200006813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spjbusiness.com",nocase; classtype:attempted-recon; sid:200006814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spk.24stunden-supportde.de",nocase; classtype:attempted-recon; sid:200006815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spk.customde-hillfe24.de",nocase; classtype:attempted-recon; sid:200006816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spk.customersde-support24.de",nocase; classtype:attempted-recon; sid:200006817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spk.deguidesrv-customers.de",nocase; classtype:attempted-recon; sid:200006818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spk.guidesrv-infode.de",nocase; classtype:attempted-recon; sid:200006819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spk.lnfoservicede-guidehelp.de",nocase; classtype:attempted-recon; sid:200006820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spk.noreply-degerman.de",nocase; classtype:attempted-recon; sid:200006821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spk.reseted-srvgermande.de",nocase; classtype:attempted-recon; sid:200006822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spk.support24-customers.de",nocase; classtype:attempted-recon; sid:200006823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spkde-srv01.de",nocase; classtype:attempted-recon; sid:200006824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spldeoldsc.duckdns.org",nocase; classtype:attempted-recon; sid:200006825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spleis2001.wixsite.com",nocase; classtype:attempted-recon; sid:200006826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spmldf.hyperphp.com",nocase; classtype:attempted-recon; sid:200006827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spnqapsgbf.duckdns.org",nocase; classtype:attempted-recon; sid:200006828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sport.protected-secur.workers.dev",nocase; classtype:attempted-recon; sid:200006829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sportquillesespalionnais.fr",nocase; classtype:attempted-recon; sid:200006830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sportsbrooks.top",nocase; classtype:attempted-recon; sid:200006831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sppdcqytpt.duckdns.org",nocase; classtype:attempted-recon; sid:200006832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sprechls.blogspot.com",nocase; classtype:attempted-recon; sid:200006833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"springo.top",nocase; classtype:attempted-recon; sid:200006834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"springsautoalpina.co.za",nocase; classtype:attempted-recon; sid:200006835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sprtrcvry.cnfrmacn.scrthlp.workers.dev",nocase; classtype:attempted-recon; sid:200006836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sprw.io",nocase; classtype:attempted-recon; sid:200006837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sqk1200.com",nocase; classtype:attempted-recon; sid:200006838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sqkufy.com",nocase; classtype:attempted-recon; sid:200006839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"srchrank.com",nocase; classtype:attempted-recon; sid:200006840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"srvde-lnfoservice.de",nocase; classtype:attempted-recon; sid:200006841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"srvloargngal1ciaon.gadlkvo1a.repl.co",nocase; classtype:attempted-recon; sid:200006842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ssdf.pphhh.cn",nocase; classtype:attempted-recon; sid:200006843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sseguridadebrou.webcindario.com",nocase; classtype:attempted-recon; sid:200006844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ssenclave.org",nocase; classtype:attempted-recon; sid:200006845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sso-garena.com",nocase; classtype:attempted-recon; sid:200006846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ssogddyrealpassyy.web.app",nocase; classtype:attempted-recon; sid:200006847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ssowebsrr435546.srvrwwalker.workers.dev",nocase; classtype:attempted-recon; sid:200006848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ssur.cc",nocase; classtype:attempted-recon; sid:200006849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"st-ionos.pages.dev",nocase; classtype:attempted-recon; sid:200006850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stage-upgrade.nycgo.com",nocase; classtype:attempted-recon; sid:200006851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staging-app.1inch.io.s3-website-us-west-1.amazonaws.com",nocase; classtype:attempted-recon; sid:200006852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staging.aisecureme.com",nocase; classtype:attempted-recon; sid:200006853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staging.egfwd.com",nocase; classtype:attempted-recon; sid:200006854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staging.eliteautomotive.com.au",nocase; classtype:attempted-recon; sid:200006855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staging.halaladvisor.com.au",nocase; classtype:attempted-recon; sid:200006856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stairsmackay.com",nocase; classtype:attempted-recon; sid:200006857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stakecansin.xyz",nocase; classtype:attempted-recon; sid:200006858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staman.synology.me",nocase; classtype:attempted-recon; sid:200006859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stamseop26.pages.dev",nocase; classtype:attempted-recon; sid:200006860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staratlas.os.com.tr",nocase; classtype:attempted-recon; sid:200006861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staratlas.se",nocase; classtype:attempted-recon; sid:200006862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"starliker.net",nocase; classtype:attempted-recon; sid:200006863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"starlinginvestments.com",nocase; classtype:attempted-recon; sid:200006864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"starttsboxfile.myfreesites.net",nocase; classtype:attempted-recon; sid:200006865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"static-aolanmallnoo1.xyz",nocase; classtype:attempted-recon; sid:200006866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"static-promote.weebly.com",nocase; classtype:attempted-recon; sid:200006867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"statisticssuccessheroes.com",nocase; classtype:attempted-recon; sid:200006868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"status-wallets.com",nocase; classtype:attempted-recon; sid:200006869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"status.ttec.smartteam.chat",nocase; classtype:attempted-recon; sid:200006870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staygoldspa.com.co",nocase; classtype:attempted-recon; sid:200006871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stclarechurch.net",nocase; classtype:attempted-recon; sid:200006872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcammunitly.ru",nocase; classtype:attempted-recon; sid:200006873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcammunlty.com",nocase; classtype:attempted-recon; sid:200006874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcamnunitly.ru",nocase; classtype:attempted-recon; sid:200006875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcamnunnlty.com",nocase; classtype:attempted-recon; sid:200006876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcommnutiy.com",nocase; classtype:attempted-recon; sid:200006877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcommunnltys.com",nocase; classtype:attempted-recon; sid:200006878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcommunutiy.ru",nocase; classtype:attempted-recon; sid:200006879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcommuunilty.ru",nocase; classtype:attempted-recon; sid:200006880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcommuunity.com",nocase; classtype:attempted-recon; sid:200006881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcomnunnlty.com",nocase; classtype:attempted-recon; sid:200006882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamconmnuntiy.ru",nocase; classtype:attempted-recon; sid:200006883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamconmunty.ru",nocase; classtype:attempted-recon; sid:200006884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steep.bengkakbibirkuuu.workers.dev",nocase; classtype:attempted-recon; sid:200006885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steep.kacangrecinonfirem.workers.dev",nocase; classtype:attempted-recon; sid:200006886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stenae47.pages.dev",nocase; classtype:attempted-recon; sid:200006887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"step-wiggly.dvrlists.com",nocase; classtype:attempted-recon; sid:200006888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"step2-9f5d0.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"step2-9f5d0.web.app",nocase; classtype:attempted-recon; sid:200006890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"step3-efc8c.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"step3-efc8c.web.app",nocase; classtype:attempted-recon; sid:200006892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"step4-30f38.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"step4-30f38.web.app",nocase; classtype:attempted-recon; sid:200006894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"step5-62e6a.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"step5-62e6a.web.app",nocase; classtype:attempted-recon; sid:200006896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepapp-minting.com",nocase; classtype:attempted-recon; sid:200006897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stephaniesmythe.com",nocase; classtype:attempted-recon; sid:200006898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepndrop.cc",nocase; classtype:attempted-recon; sid:200006899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepp10-98e14.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepp10-98e14.web.app",nocase; classtype:attempted-recon; sid:200006901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepp11-a7e2a.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepp11-a7e2a.web.app",nocase; classtype:attempted-recon; sid:200006903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepp16-52ee1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepp16-52ee1.web.app",nocase; classtype:attempted-recon; sid:200006905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepp17-d761f.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepp17-d761f.web.app",nocase; classtype:attempted-recon; sid:200006907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepp19-ced6c.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepp19-ced6c.web.app",nocase; classtype:attempted-recon; sid:200006909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepp7-98a8e.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepp7-98a8e.web.app",nocase; classtype:attempted-recon; sid:200006911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepp8-c4298.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepp8-c4298.web.app",nocase; classtype:attempted-recon; sid:200006913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepp9-54a62.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepp9-54a62.web.app",nocase; classtype:attempted-recon; sid:200006915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steris.cloud",nocase; classtype:attempted-recon; sid:200006916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stevemaddencanadashoes.com",nocase; classtype:attempted-recon; sid:200006917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stevemaddennetherlands.com",nocase; classtype:attempted-recon; sid:200006918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stevemaddenshoe.net",nocase; classtype:attempted-recon; sid:200006919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stevencrews.com",nocase; classtype:attempted-recon; sid:200006920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stevepochini.wixsite.com",nocase; classtype:attempted-recon; sid:200006921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"still-cherry-4888.hescohqq.workers.dev",nocase; classtype:attempted-recon; sid:200006922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"still-dust-dc1f.dumpcloud542.workers.dev",nocase; classtype:attempted-recon; sid:200006923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stlpcnpoon.duckdns.org",nocase; classtype:attempted-recon; sid:200006924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stnmtolhdj.duckdns.org",nocase; classtype:attempted-recon; sid:200006925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sto1.bitbucket.io",nocase; classtype:attempted-recon; sid:200006926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sto7.bitbucket.io",nocase; classtype:attempted-recon; sid:200006927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stockwiser.cloud",nocase; classtype:attempted-recon; sid:200006928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stolizaparketa.ru",nocase; classtype:attempted-recon; sid:200006929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage-get.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage-get.web.app",nocase; classtype:attempted-recon; sid:200006931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage-rvp.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage-rvp.web.app",nocase; classtype:attempted-recon; sid:200006933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage-trc.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage-trc.web.app",nocase; classtype:attempted-recon; sid:200006935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.yandexcloud.net",nocase; classtype:attempted-recon; sid:200006936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi-stg.fleek.co",nocase; classtype:attempted-recon; sid:200006937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storages-e.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storages-e.web.app",nocase; classtype:attempted-recon; sid:200006939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storenike365.top",nocase; classtype:attempted-recon; sid:200006940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stornompsiena.me",nocase; classtype:attempted-recon; sid:200006941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"strabaneselfstorage.com",nocase; classtype:attempted-recon; sid:200006942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"streetpower-rekond.se",nocase; classtype:attempted-recon; sid:200006943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"strikeitalia.com",nocase; classtype:attempted-recon; sid:200006944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stroiperspektiva.ru",nocase; classtype:attempted-recon; sid:200006945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"strongims.com",nocase; classtype:attempted-recon; sid:200006946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"strugglestokids.com",nocase; classtype:attempted-recon; sid:200006947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stte.ac.id",nocase; classtype:attempted-recon; sid:200006948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stty.xyz",nocase; classtype:attempted-recon; sid:200006949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"studio-lol.com",nocase; classtype:attempted-recon; sid:200006950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"studiofortyfive.de",nocase; classtype:attempted-recon; sid:200006951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"studiousoriginalpatches.galiciabank1.repl.co",nocase; classtype:attempted-recon; sid:200006952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stuye3890.byethost6.com",nocase; classtype:attempted-recon; sid:200006953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stylifehomedecors.com",nocase; classtype:attempted-recon; sid:200006954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suas-solucoes.com",nocase; classtype:attempted-recon; sid:200006955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suavlahiperx2.com",nocase; classtype:attempted-recon; sid:200006956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"submitted-info-review.com",nocase; classtype:attempted-recon; sid:200006957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"subsworker.bid",nocase; classtype:attempted-recon; sid:200006958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"subulussalamkota.desa.id",nocase; classtype:attempted-recon; sid:200006959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"successfullifemarketing.com",nocase; classtype:attempted-recon; sid:200006960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sucursal29854888.hostfree.pw",nocase; classtype:attempted-recon; sid:200006961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suelunn.com",nocase; classtype:attempted-recon; sid:200006962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suhiisawap.com",nocase; classtype:attempted-recon; sid:200006963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suhis-appswap.com",nocase; classtype:attempted-recon; sid:200006964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suiushe.com",nocase; classtype:attempted-recon; sid:200006965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suiviticket.co",nocase; classtype:attempted-recon; sid:200006966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sultan-raza.github.io",nocase; classtype:attempted-recon; sid:200006967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sumary.repport-fb.accts-protocol.workers.dev",nocase; classtype:attempted-recon; sid:200006968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"summary-fb.report-accts-notification.workers.dev",nocase; classtype:attempted-recon; sid:200006969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"summary-protocol.report-accts-notification.workers.dev",nocase; classtype:attempted-recon; sid:200006970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"summer-frost-9891.on.fleek.co",nocase; classtype:attempted-recon; sid:200006971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sunnyhollo.com",nocase; classtype:attempted-recon; sid:200006972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sunnylandingpages.com",nocase; classtype:attempted-recon; sid:200006973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supe.seharusnyakita.workers.dev",nocase; classtype:attempted-recon; sid:200006974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"super-magalu-br.com",nocase; classtype:attempted-recon; sid:200006975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"super-magalu.net",nocase; classtype:attempted-recon; sid:200006976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supoff22.pages.dev",nocase; classtype:attempted-recon; sid:200006977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supp0rt-ovh.web.app",nocase; classtype:attempted-recon; sid:200006978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-dapps.info",nocase; classtype:attempted-recon; sid:200006979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-helpcenter15686217.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-helpcenter15686217.web.app",nocase; classtype:attempted-recon; sid:200006981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-helpcenter567106982.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-helpcenter567106982.web.app",nocase; classtype:attempted-recon; sid:200006983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-helpcenter716262119.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-helpcenter716262119.web.app",nocase; classtype:attempted-recon; sid:200006985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-helpcenter79531569.web.app",nocase; classtype:attempted-recon; sid:200006986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-helpcenter815310385.web.app",nocase; classtype:attempted-recon; sid:200006987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-usps.nazsolutions.com",nocase; classtype:attempted-recon; sid:200006988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support.att0n1ine.workers.dev",nocase; classtype:attempted-recon; sid:200006989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support.globepropertymanagementservice.com",nocase; classtype:attempted-recon; sid:200006990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support24-customers.de",nocase; classtype:attempted-recon; sid:200006991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supporteen.jp",nocase; classtype:attempted-recon; sid:200006992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suptfaxna40.pages.dev",nocase; classtype:attempted-recon; sid:200006993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sur3cr.csb.app",nocase; classtype:attempted-recon; sid:200006994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surveyol.com",nocase; classtype:attempted-recon; sid:200006995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sushidocs.app",nocase; classtype:attempted-recon; sid:200006996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sushiexchange.us",nocase; classtype:attempted-recon; sid:200006997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sushistack.xyz",nocase; classtype:attempted-recon; sid:200006998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sushistacks.tech",nocase; classtype:attempted-recon; sid:200006999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sushiswap.news",nocase; classtype:attempted-recon; sid:200007000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sushiswappps.com",nocase; classtype:attempted-recon; sid:200007001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sushiswapsdocs.com",nocase; classtype:attempted-recon; sid:200007002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sushiswfsdfgdfbc.weebly.com",nocase; classtype:attempted-recon; sid:200007003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suslniswap.com",nocase; classtype:attempted-recon; sid:200007004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suspengalihomebacki.suspengalihomba.repl.co",nocase; classtype:attempted-recon; sid:200007005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"svcaavwfmv.duckdns.org",nocase; classtype:attempted-recon; sid:200007006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swaaps-sushi.com",nocase; classtype:attempted-recon; sid:200007007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swaggerhub-noprod.mibanco.com.pe",nocase; classtype:attempted-recon; sid:200007008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swanholm.net",nocase; classtype:attempted-recon; sid:200007009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swap-bsc.tokentool.club",nocase; classtype:attempted-recon; sid:200007010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swappauto.staging.lcsolutions.it",nocase; classtype:attempted-recon; sid:200007011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swapuni.org",nocase; classtype:attempted-recon; sid:200007012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swardoki-a3777a.ingress-bonde.ewp.live",nocase; classtype:attempted-recon; sid:200007013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swardoki-s-school.thinkific.com",nocase; classtype:attempted-recon; sid:200007014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sweet-efax7656554545-aebf.82929222-happygringo.workers.dev",nocase; classtype:attempted-recon; sid:200007015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sweet-math-855f.jpatelvemvo9033.workers.dev",nocase; classtype:attempted-recon; sid:200007016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sweet-sound-ba1a.sharepointonline-live2248.workers.dev",nocase; classtype:attempted-recon; sid:200007017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swiderskiequip.com",nocase; classtype:attempted-recon; sid:200007018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swiftszapprotocol.ru",nocase; classtype:attempted-recon; sid:200007019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swipeindustry.com",nocase; classtype:attempted-recon; sid:200007020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swisscom.myfreesites.net",nocase; classtype:attempted-recon; sid:200007021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"switstart.blogspot.com",nocase; classtype:attempted-recon; sid:200007022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"switzapps.blogspot.com",nocase; classtype:attempted-recon; sid:200007023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swtdomcheck5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sx343434.sx53553.repl.co",nocase; classtype:attempted-recon; sid:200007025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sxb1plvwcpnl492625.prod.sxb1.secureserver.net",nocase; classtype:attempted-recon; sid:200007026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sxtgabt.cn",nocase; classtype:attempted-recon; sid:200007027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sxuqdiofuf.duckdns.org",nocase; classtype:attempted-recon; sid:200007028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"syatwea.com",nocase; classtype:attempted-recon; sid:200007029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sydenhampharma.com",nocase; classtype:attempted-recon; sid:200007030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sydney-storage-sharedfile.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sydney-storage-sharedfile.web.app",nocase; classtype:attempted-recon; sid:200007032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sygeforsikring.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sygeforsikring.web.app",nocase; classtype:attempted-recon; sid:200007034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"symabeautyoriginal.com",nocase; classtype:attempted-recon; sid:200007035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"synagogue-websites.com",nocase; classtype:attempted-recon; sid:200007036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"synaxisreadymix.com",nocase; classtype:attempted-recon; sid:200007037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"syncbotzfixer.com",nocase; classtype:attempted-recon; sid:200007038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"syncdappconnect.com",nocase; classtype:attempted-recon; sid:200007039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"syncwldapp.web.app",nocase; classtype:attempted-recon; sid:200007040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"syracuseinfo.com",nocase; classtype:attempted-recon; sid:200007041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"system-com.preview-domain.com",nocase; classtype:attempted-recon; sid:200007042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"systems-bjoska.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"systems-bjoska.web.app",nocase; classtype:attempted-recon; sid:200007044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"szhegwitab.duckdns.org",nocase; classtype:attempted-recon; sid:200007045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"szjhbeugfjejykhzkhgeuhjk-gisoje1896737053.codeanyapp.com",nocase; classtype:attempted-recon; sid:200007046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t10note.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t10note.web.app",nocase; classtype:attempted-recon; sid:200007048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t11note.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t11note.web.app",nocase; classtype:attempted-recon; sid:200007050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t12note.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t12note.web.app",nocase; classtype:attempted-recon; sid:200007052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t1note.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t1note.web.app",nocase; classtype:attempted-recon; sid:200007054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t2note.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t2note.web.app",nocase; classtype:attempted-recon; sid:200007056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t2xmzm.webwave.dev",nocase; classtype:attempted-recon; sid:200007057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t3note.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t3note.web.app",nocase; classtype:attempted-recon; sid:200007059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t5note.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t5note.web.app",nocase; classtype:attempted-recon; sid:200007061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t6note.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t6note.web.app",nocase; classtype:attempted-recon; sid:200007063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t7634568956.wixsite.com",nocase; classtype:attempted-recon; sid:200007064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t7note.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t7note.web.app",nocase; classtype:attempted-recon; sid:200007066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t8note.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t8note.web.app",nocase; classtype:attempted-recon; sid:200007068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t9note.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t9note.web.app",nocase; classtype:attempted-recon; sid:200007070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tabaresdo-b93aa9.ingress-florina.ewp.live",nocase; classtype:attempted-recon; sid:200007071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"taher-mohamed-ahmed-saad.github.io",nocase; classtype:attempted-recon; sid:200007072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tahxktmezq.duckdns.org",nocase; classtype:attempted-recon; sid:200007073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"talktalkea.weebly.com",nocase; classtype:attempted-recon; sid:200007074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tambunanajaa.martulangsore.workers.dev",nocase; classtype:attempted-recon; sid:200007075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tan29mt1.blogspot.com",nocase; classtype:attempted-recon; sid:200007076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tariqaqik.ip4s.com",nocase; classtype:attempted-recon; sid:200007077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"taskmbox493.softr.app",nocase; classtype:attempted-recon; sid:200007078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tattered-purring-protocol.glitch.me",nocase; classtype:attempted-recon; sid:200007079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"taunussparkassse.com",nocase; classtype:attempted-recon; sid:200007080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tax.refund.link.u187fe.c26o.live",nocase; classtype:attempted-recon; sid:200007081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tb915hdh89.mfs.gg",nocase; classtype:attempted-recon; sid:200007082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tbv265743bv7.42web.io",nocase; classtype:attempted-recon; sid:200007083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tby.eb-sites.com",nocase; classtype:attempted-recon; sid:200007084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tbzsoqszjv.duckdns.org",nocase; classtype:attempted-recon; sid:200007085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tc.archeducomonitsha.org.ng",nocase; classtype:attempted-recon; sid:200007086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tcaconnect.ac-page.com",nocase; classtype:attempted-recon; sid:200007087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tckzadzpia.duckdns.org",nocase; classtype:attempted-recon; sid:200007088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tcoe.in",nocase; classtype:attempted-recon; sid:200007089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tdjbxjsxaq.duckdns.org",nocase; classtype:attempted-recon; sid:200007090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tdsecurities.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tdsecurities.web.app",nocase; classtype:attempted-recon; sid:200007092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tdzmurlhit.duckdns.org",nocase; classtype:attempted-recon; sid:200007093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teamattsupportserviceavailabletoday.square.site",nocase; classtype:attempted-recon; sid:200007094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teamemc2.com",nocase; classtype:attempted-recon; sid:200007095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teamgoogle125590.psee.ly",nocase; classtype:attempted-recon; sid:200007096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teamsmicrosoft.noreply00001110msn000101000.workers.dev",nocase; classtype:attempted-recon; sid:200007097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teamverificationscenter.solutionsoft.repl.co",nocase; classtype:attempted-recon; sid:200007098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tebapit.com",nocase; classtype:attempted-recon; sid:200007099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"techniair.ma",nocase; classtype:attempted-recon; sid:200007100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"techority.com",nocase; classtype:attempted-recon; sid:200007101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teck.ph",nocase; classtype:attempted-recon; sid:200007102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tecmachine.com.br",nocase; classtype:attempted-recon; sid:200007103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tecnigo.co",nocase; classtype:attempted-recon; sid:200007104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tecnominproductos.com",nocase; classtype:attempted-recon; sid:200007105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teekitstorage.blob.core.windows.net",nocase; classtype:attempted-recon; sid:200007106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teenmg.com",nocase; classtype:attempted-recon; sid:200007107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tehacarrasa.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200007108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telefon-anmeldehilfe.de",nocase; classtype:attempted-recon; sid:200007109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telhanorte-90.blogspot.com",nocase; classtype:attempted-recon; sid:200007110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tellmeliu.github.io",nocase; classtype:attempted-recon; sid:200007111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-823a7434e49e.intercom-clicks.com",nocase; classtype:attempted-recon; sid:200007112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"templat65sldh.myfreesites.net",nocase; classtype:attempted-recon; sid:200007113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"terjalapakkz.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200007114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"terpelsicumple.com",nocase; classtype:attempted-recon; sid:200007115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"test.staypoland.com",nocase; classtype:attempted-recon; sid:200007116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"test.webclient4.de",nocase; classtype:attempted-recon; sid:200007117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"testingmir.github.io",nocase; classtype:attempted-recon; sid:200007118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"testpshing2.duckdns.org",nocase; classtype:attempted-recon; sid:200007119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"texasfreedomrun.com",nocase; classtype:attempted-recon; sid:200007120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"texoet.com",nocase; classtype:attempted-recon; sid:200007121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tflxvp.opyyc.tghali.codinglogics.com",nocase; classtype:attempted-recon; sid:200007122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tfowflc.cn",nocase; classtype:attempted-recon; sid:200007123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tfrzjrswkg.duckdns.org",nocase; classtype:attempted-recon; sid:200007124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tfypiyruzc.duckdns.org",nocase; classtype:attempted-recon; sid:200007125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tg.pe",nocase; classtype:attempted-recon; sid:200007126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tg0c4r4p3an6fj1nhu6oa6fb95d57kruqle7v2fdefe779r02n8f840.siasky.net",nocase; classtype:attempted-recon; sid:200007127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tgcmex.com",nocase; classtype:attempted-recon; sid:200007128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tgrsdv.nmqfmuf.cn",nocase; classtype:attempted-recon; sid:200007129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"th4khlqgh.rest",nocase; classtype:attempted-recon; sid:200007130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thanhlyhangcu24h.vn",nocase; classtype:attempted-recon; sid:200007131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"the-arenaa.blogspot.com",nocase; classtype:attempted-recon; sid:200007132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"theb0se.github.io",nocase; classtype:attempted-recon; sid:200007133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thebeachleague.com",nocase; classtype:attempted-recon; sid:200007134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thecrytpchain.com",nocase; classtype:attempted-recon; sid:200007135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thedefiantsnft.com",nocase; classtype:attempted-recon; sid:200007136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thedreamstudio.co.in",nocase; classtype:attempted-recon; sid:200007137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thefoodmantra.in",nocase; classtype:attempted-recon; sid:200007138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thegoda.wl-minting.com",nocase; classtype:attempted-recon; sid:200007139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thehumaniod.com",nocase; classtype:attempted-recon; sid:200007140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"theironinnparlour.co.uk",nocase; classtype:attempted-recon; sid:200007141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thejollyoleelf.com",nocase; classtype:attempted-recon; sid:200007142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thejuteworld.com",nocase; classtype:attempted-recon; sid:200007143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thelennons.org.uk",nocase; classtype:attempted-recon; sid:200007144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thelightfeather.com",nocase; classtype:attempted-recon; sid:200007145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"themarketprof.com",nocase; classtype:attempted-recon; sid:200007146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"themontijoteammortgage.com",nocase; classtype:attempted-recon; sid:200007147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"themoustaches.com",nocase; classtype:attempted-recon; sid:200007148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"theopenseanft.com",nocase; classtype:attempted-recon; sid:200007149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"theparbs.com",nocase; classtype:attempted-recon; sid:200007150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"therizzos.net",nocase; classtype:attempted-recon; sid:200007151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"theroyalbharti.com",nocase; classtype:attempted-recon; sid:200007152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thespace.finance",nocase; classtype:attempted-recon; sid:200007153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thespecialcare.exprotutor.com",nocase; classtype:attempted-recon; sid:200007154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thestatusupdate.net",nocase; classtype:attempted-recon; sid:200007155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thewallet-sync.com",nocase; classtype:attempted-recon; sid:200007156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thinhanphatco.com",nocase; classtype:attempted-recon; sid:200007157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thirdhalfbrewing.com",nocase; classtype:attempted-recon; sid:200007158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thisbrou4logc.forbroulogc.repl.co",nocase; classtype:attempted-recon; sid:200007159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thisbrourepublic4.ourbroulo9gc.repl.co",nocase; classtype:attempted-recon; sid:200007160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thongtacconghanoi.net",nocase; classtype:attempted-recon; sid:200007161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"three-retail-live.devicetradein.co.uk",nocase; classtype:attempted-recon; sid:200007162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thriving-xxw0-ps0w.netlify.app",nocase; classtype:attempted-recon; sid:200007163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"throbbing-wildflower-4625.roundcubeupdateq.workers.dev",nocase; classtype:attempted-recon; sid:200007164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tight-sky-8967.on.fleek.co",nocase; classtype:attempted-recon; sid:200007165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"timelydualhypermedia.cuscatlan.repl.co",nocase; classtype:attempted-recon; sid:200007166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny-grass.sevzzw9r.workers.dev",nocase; classtype:attempted-recon; sid:200007167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny-resonance-33c3.ianjeff5421794.workers.dev",nocase; classtype:attempted-recon; sid:200007168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny-unit-6388.on.fleek.co",nocase; classtype:attempted-recon; sid:200007169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tipografieonline.ro",nocase; classtype:attempted-recon; sid:200007170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"titcpkhvdl.duckdns.org",nocase; classtype:attempted-recon; sid:200007171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"titcsoebmhnkskonczh-v-tyeqwnnbqihizxroyg-rnddfbqikphzmaupdtq.glitch.me",nocase; classtype:attempted-recon; sid:200007172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tjnmlbqmmf.duckdns.org",nocase; classtype:attempted-recon; sid:200007173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tjotwlfhmf.duckdns.org",nocase; classtype:attempted-recon; sid:200007174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tjqcumglfj.duckdns.org",nocase; classtype:attempted-recon; sid:200007175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tjtuqppicw.duckdns.org",nocase; classtype:attempted-recon; sid:200007176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tjymzwfwkm.duckdns.org",nocase; classtype:attempted-recon; sid:200007177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tkjb2019.com",nocase; classtype:attempted-recon; sid:200007178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tlatx.com",nocase; classtype:attempted-recon; sid:200007179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tmglcfvmqb.duckdns.org",nocase; classtype:attempted-recon; sid:200007180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tnijurl.com",nocase; classtype:attempted-recon; sid:200007181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tnl44.duckdns.org",nocase; classtype:attempted-recon; sid:200007182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tnuvpcteke.duckdns.org",nocase; classtype:attempted-recon; sid:200007183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"to-ken.biz",nocase; classtype:attempted-recon; sid:200007184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"toddler-town.com",nocase; classtype:attempted-recon; sid:200007185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"togglebutton.pp5e.in",nocase; classtype:attempted-recon; sid:200007186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"token236335.eminentdigital.repl.co",nocase; classtype:attempted-recon; sid:200007187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokens-connect.surekequipmentservice.com",nocase; classtype:attempted-recon; sid:200007188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokyotravelbureau.com",nocase; classtype:attempted-recon; sid:200007189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"top-eventregister.ml",nocase; classtype:attempted-recon; sid:200007190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"topbonusleon.com",nocase; classtype:attempted-recon; sid:200007191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"topgradespices.in",nocase; classtype:attempted-recon; sid:200007192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"topleathershop.com",nocase; classtype:attempted-recon; sid:200007193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"topskills.ru",nocase; classtype:attempted-recon; sid:200007194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"topstocksolutions.com",nocase; classtype:attempted-recon; sid:200007195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"topvrcvpzq.duckdns.org",nocase; classtype:attempted-recon; sid:200007196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"toramfree.cf",nocase; classtype:attempted-recon; sid:200007197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"torccolborrachas.blogspot.com",nocase; classtype:attempted-recon; sid:200007198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"torreshome.us",nocase; classtype:attempted-recon; sid:200007199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"totalcoin.pro",nocase; classtype:attempted-recon; sid:200007200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"touch-media.ro",nocase; classtype:attempted-recon; sid:200007201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tour-pubg-mobile-register-now.duckdns.org",nocase; classtype:attempted-recon; sid:200007202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"toursbangla.com",nocase; classtype:attempted-recon; sid:200007203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tphtan.ga",nocase; classtype:attempted-recon; sid:200007204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tqikoed.cn",nocase; classtype:attempted-recon; sid:200007205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"track-id1793.web.app",nocase; classtype:attempted-recon; sid:200007206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"track-id4190.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"track-id4190.web.app",nocase; classtype:attempted-recon; sid:200007208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"track-id7297.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"track-id7297.web.app",nocase; classtype:attempted-recon; sid:200007210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"track-id8982.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"track-id8982.web.app",nocase; classtype:attempted-recon; sid:200007212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"track-redeliver.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"track-redeliver.web.app",nocase; classtype:attempted-recon; sid:200007214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trackerc.osend.in",nocase; classtype:attempted-recon; sid:200007215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trackgroups.unaux.com",nocase; classtype:attempted-recon; sid:200007216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tracking.flowii.com",nocase; classtype:attempted-recon; sid:200007217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tracking.selfserviceib.com",nocase; classtype:attempted-recon; sid:200007218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trade-iq-option-2021.blogspot.com",nocase; classtype:attempted-recon; sid:200007219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trade.dydx.exchange",nocase; classtype:attempted-recon; sid:200007220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trader.uniocean.org",nocase; classtype:attempted-recon; sid:200007221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tradex-premium.com",nocase; classtype:attempted-recon; sid:200007222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trading-better.com",nocase; classtype:attempted-recon; sid:200007223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tradingbbex.com",nocase; classtype:attempted-recon; sid:200007224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trams.mot.go.th",nocase; classtype:attempted-recon; sid:200007225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"transaccionalcreditospagos.liveblog365.com",nocase; classtype:attempted-recon; sid:200007226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"transcend.ae",nocase; classtype:attempted-recon; sid:200007227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"transfer-wisea.app.link",nocase; classtype:attempted-recon; sid:200007228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"transnetsporterminal.net",nocase; classtype:attempted-recon; sid:200007229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"transportal.hostfree.pw",nocase; classtype:attempted-recon; sid:200007230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trasfigurables.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trasfigurables.web.app",nocase; classtype:attempted-recon; sid:200007232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trashed-2-treasure.com",nocase; classtype:attempted-recon; sid:200007233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"travelvisit-mexico.com",nocase; classtype:attempted-recon; sid:200007234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"travlamp.com",nocase; classtype:attempted-recon; sid:200007235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tree-wealthy-ravioli.glitch.me",nocase; classtype:attempted-recon; sid:200007236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"treex.in",nocase; classtype:attempted-recon; sid:200007237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trensect.com",nocase; classtype:attempted-recon; sid:200007238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trfhihyluw.duckdns.org",nocase; classtype:attempted-recon; sid:200007239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trgracecompany.com",nocase; classtype:attempted-recon; sid:200007240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tribelio.page",nocase; classtype:attempted-recon; sid:200007241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tribu-b97581.ingress-comporellon.ewp.live",nocase; classtype:attempted-recon; sid:200007242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tribunbalikpapan.com",nocase; classtype:attempted-recon; sid:200007243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trj52h.hyperphp.com",nocase; classtype:attempted-recon; sid:200007244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tronwallet.com.cn",nocase; classtype:attempted-recon; sid:200007245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tropical-lavanderia.com.br",nocase; classtype:attempted-recon; sid:200007246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"truebrowntrials.0nlinegalicia.repl.co",nocase; classtype:attempted-recon; sid:200007247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trueid.stream",nocase; classtype:attempted-recon; sid:200007248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"truist-online.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"truist-online.web.app",nocase; classtype:attempted-recon; sid:200007250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trulynolen.co.mz",nocase; classtype:attempted-recon; sid:200007251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trustpadclaim.com",nocase; classtype:attempted-recon; sid:200007252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trustwallet-recovery.xyz",nocase; classtype:attempted-recon; sid:200007253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trustwallettop.easy.co",nocase; classtype:attempted-recon; sid:200007254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trya673434.260mb.net",nocase; classtype:attempted-recon; sid:200007255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trytoshop.com",nocase; classtype:attempted-recon; sid:200007256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trzecipixel.com",nocase; classtype:attempted-recon; sid:200007257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ts.my",nocase; classtype:attempted-recon; sid:200007258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tscardjapan.work.gd",nocase; classtype:attempted-recon; sid:200007259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ttatithorritati.podcastheritage.fr",nocase; classtype:attempted-recon; sid:200007260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ttavvmslsc.duckdns.org",nocase; classtype:attempted-recon; sid:200007261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ttcswap.finance",nocase; classtype:attempted-recon; sid:200007262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tugcecolakbeauty.com",nocase; classtype:attempted-recon; sid:200007263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tukofertas.com.br",nocase; classtype:attempted-recon; sid:200007264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tumkiosa.co.vu",nocase; classtype:attempted-recon; sid:200007265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tumpeituahe.co.vu",nocase; classtype:attempted-recon; sid:200007266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuotvaqhwz.duckdns.org",nocase; classtype:attempted-recon; sid:200007267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tupguaszti.duckdns.org",nocase; classtype:attempted-recon; sid:200007268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuqya1616taa.unaux.com",nocase; classtype:attempted-recon; sid:200007269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuscantravel.com",nocase; classtype:attempted-recon; sid:200007270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuspromociones2022.com",nocase; classtype:attempted-recon; sid:200007271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tutor.iqsademo.com",nocase; classtype:attempted-recon; sid:200007272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuy778kio09.liveblog365.com",nocase; classtype:attempted-recon; sid:200007273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuy7a6w71.liveblog365.com",nocase; classtype:attempted-recon; sid:200007274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuyainiciarcarlo.hostfree.pw",nocase; classtype:attempted-recon; sid:200007275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuyaritagua.hostfree.pw",nocase; classtype:attempted-recon; sid:200007276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuyarvadsghdfdg.great-site.net",nocase; classtype:attempted-recon; sid:200007277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuyatargetone.ihostfull.com",nocase; classtype:attempted-recon; sid:200007278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tvdnfdqcpj.duckdns.org",nocase; classtype:attempted-recon; sid:200007279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tvszsiooys.duckdns.org",nocase; classtype:attempted-recon; sid:200007280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"twibhokiandgraiyakischools.com",nocase; classtype:attempted-recon; sid:200007281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"twilig.semangatpuasaaa.workers.dev",nocase; classtype:attempted-recon; sid:200007282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"twilight.recomfiermsite.workers.dev",nocase; classtype:attempted-recon; sid:200007283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"twitterhelper-manager.com",nocase; classtype:attempted-recon; sid:200007284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"twittermanagerhelp.com",nocase; classtype:attempted-recon; sid:200007285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"twitterreporterhelp.com",nocase; classtype:attempted-recon; sid:200007286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"twusztcxcn.duckdns.org",nocase; classtype:attempted-recon; sid:200007287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"twwyjgoqdv.duckdns.org",nocase; classtype:attempted-recon; sid:200007288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"txcleczybl.duckdns.org",nocase; classtype:attempted-recon; sid:200007289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"txpxffnidq.duckdns.org",nocase; classtype:attempted-recon; sid:200007290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"txujkzkiir.duckdns.org",nocase; classtype:attempted-recon; sid:200007291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tyaco402.hostfree.pw",nocase; classtype:attempted-recon; sid:200007292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tyaprtlahsbj.hostfree.pw",nocase; classtype:attempted-recon; sid:200007293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"typvcvdlkq.duckdns.org",nocase; classtype:attempted-recon; sid:200007294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u-bolt.co",nocase; classtype:attempted-recon; sid:200007295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u14511627.ct.sendgrid.net",nocase; classtype:attempted-recon; sid:200007296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u1742042.cp.regruhosting.ru",nocase; classtype:attempted-recon; sid:200007297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u1756632.plsk.regruhosting.ru",nocase; classtype:attempted-recon; sid:200007298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u1765117.plsk.regruhosting.ru",nocase; classtype:attempted-recon; sid:200007299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u18741649.ct.sendgrid.net",nocase; classtype:attempted-recon; sid:200007300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u3vii.codesandbox.io",nocase; classtype:attempted-recon; sid:200007301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uaegmbexxf.duckdns.org",nocase; classtype:attempted-recon; sid:200007302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uaeutly.cn",nocase; classtype:attempted-recon; sid:200007303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uamltuvlbz.duckdns.org",nocase; classtype:attempted-recon; sid:200007304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uat-new.wcv.com",nocase; classtype:attempted-recon; sid:200007305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ubfhvscqhn.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ubfhvscqhn.web.app",nocase; classtype:attempted-recon; sid:200007307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ucbkuirmkw.duckdns.org",nocase; classtype:attempted-recon; sid:200007308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ucbonline.com",nocase; classtype:attempted-recon; sid:200007309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uconn-edu-online.weebly.com",nocase; classtype:attempted-recon; sid:200007310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"udbetaling-sygeforsikring.web.app",nocase; classtype:attempted-recon; sid:200007311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"udbtkpibbz.duckdns.org",nocase; classtype:attempted-recon; sid:200007312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uevvulzqsm.duckdns.org",nocase; classtype:attempted-recon; sid:200007313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ufmqcghosx.duckdns.org",nocase; classtype:attempted-recon; sid:200007314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uftoken.org",nocase; classtype:attempted-recon; sid:200007315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ugfutghgtx.duckdns.org",nocase; classtype:attempted-recon; sid:200007316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ugyftdraq.hostfree.pw",nocase; classtype:attempted-recon; sid:200007317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uinbg.79iuy0.cn",nocase; classtype:attempted-recon; sid:200007318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uipbdwkxwh.duckdns.org",nocase; classtype:attempted-recon; sid:200007319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uisbricarw.hyperphp.com",nocase; classtype:attempted-recon; sid:200007320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uitbfxripp.duckdns.org",nocase; classtype:attempted-recon; sid:200007321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uizdjncnaf.duckdns.org",nocase; classtype:attempted-recon; sid:200007322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ujbgnduzhz.duckdns.org",nocase; classtype:attempted-recon; sid:200007323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uk-apple-verify.web.app",nocase; classtype:attempted-recon; sid:200007324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uk-evri-reschedule.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uk-evri-reschedule.web.app",nocase; classtype:attempted-recon; sid:200007326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ukd6s.hyperphp.com",nocase; classtype:attempted-recon; sid:200007327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ukraineconsulatelib.azurewebsites.net",nocase; classtype:attempted-recon; sid:200007328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ukrt1s.hyperphp.com",nocase; classtype:attempted-recon; sid:200007329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ulkkajahls.duckdns.org",nocase; classtype:attempted-recon; sid:200007330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ultimateperfection04.com",nocase; classtype:attempted-recon; sid:200007331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ultra-careful-tendency.glitch.me",nocase; classtype:attempted-recon; sid:200007332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ume.la",nocase; classtype:attempted-recon; sid:200007333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"umjmxtkcsa.duckdns.org",nocase; classtype:attempted-recon; sid:200007334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"umu.link",nocase; classtype:attempted-recon; sid:200007335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"un1cef.org",nocase; classtype:attempted-recon; sid:200007336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unam.myfreesites.net",nocase; classtype:attempted-recon; sid:200007337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"undergroundbats.com",nocase; classtype:attempted-recon; sid:200007338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uneedparts.ca",nocase; classtype:attempted-recon; sid:200007339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unfitunfinishedmainframe.prespekaopi.repl.co",nocase; classtype:attempted-recon; sid:200007340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uni-eth.com",nocase; classtype:attempted-recon; sid:200007341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uni-sportcamp.com",nocase; classtype:attempted-recon; sid:200007342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniassessoria.com.br",nocase; classtype:attempted-recon; sid:200007343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unicorp-indonesia.com",nocase; classtype:attempted-recon; sid:200007344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unicreditaustria.ucs.info",nocase; classtype:attempted-recon; sid:200007345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unioncredidesarrollo.com",nocase; classtype:attempted-recon; sid:200007346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unionheightsresidental.com",nocase; classtype:attempted-recon; sid:200007347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unionn.webcindario.com",nocase; classtype:attempted-recon; sid:200007348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unique-the-coder.github.io",nocase; classtype:attempted-recon; sid:200007349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unisons.store",nocase; classtype:attempted-recon; sid:200007350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unisonsouthayr.org.uk",nocase; classtype:attempted-recon; sid:200007351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap-event.org",nocase; classtype:attempted-recon; sid:200007352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap-exchanges.com",nocase; classtype:attempted-recon; sid:200007353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap-org-finance.ml",nocase; classtype:attempted-recon; sid:200007354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.auction",nocase; classtype:attempted-recon; sid:200007355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.openwallet.dev",nocase; classtype:attempted-recon; sid:200007356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.pages.dev",nocase; classtype:attempted-recon; sid:200007357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.samuelwembe.com",nocase; classtype:attempted-recon; sid:200007358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.samvitello.com",nocase; classtype:attempted-recon; sid:200007359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.supply",nocase; classtype:attempted-recon; sid:200007360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.token.im",nocase; classtype:attempted-recon; sid:200007361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.umidao.org",nocase; classtype:attempted-recon; sid:200007362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.v2.testnet.pulsechain.com",nocase; classtype:attempted-recon; sid:200007363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswapfinancing.info",nocase; classtype:attempted-recon; sid:200007364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitedoil-eg.com",nocase; classtype:attempted-recon; sid:200007365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unitedsolutions.pk",nocase; classtype:attempted-recon; sid:200007366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"universalrectifyerz.xyz",nocase; classtype:attempted-recon; sid:200007367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"univmixte.boxmode.io",nocase; classtype:attempted-recon; sid:200007368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unjardinideal.com",nocase; classtype:attempted-recon; sid:200007369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unlawfulfranktitles.usansbs6271.repl.co",nocase; classtype:attempted-recon; sid:200007370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unmotdavance-redaction.fr",nocase; classtype:attempted-recon; sid:200007371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unojapano.com",nocase; classtype:attempted-recon; sid:200007372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unopuuggnn.duckdns.org",nocase; classtype:attempted-recon; sid:200007373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unryzroktj.duckdns.org",nocase; classtype:attempted-recon; sid:200007374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unsub.listhandlr.com",nocase; classtype:attempted-recon; sid:200007375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unwillingflustereddiscussions.verificabankin.repl.co",nocase; classtype:attempted-recon; sid:200007376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unzcbepyja.duckdns.org",nocase; classtype:attempted-recon; sid:200007377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uouzravmey.duckdns.org",nocase; classtype:attempted-recon; sid:200007378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uparcelservice-client.com",nocase; classtype:attempted-recon; sid:200007379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"upbearin.xyz",nocase; classtype:attempted-recon; sid:200007380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"upcday.com",nocase; classtype:attempted-recon; sid:200007381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"upceshop.cn",nocase; classtype:attempted-recon; sid:200007382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updat3s.atts3rvices.workers.dev",nocase; classtype:attempted-recon; sid:200007383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"update-doc.list-project-shared.workers.dev",nocase; classtype:attempted-recon; sid:200007384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"update.attservice.workers.dev",nocase; classtype:attempted-recon; sid:200007385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"update.com.brandonanything.com",nocase; classtype:attempted-recon; sid:200007386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"update.spk-pushtan.app",nocase; classtype:attempted-recon; sid:200007387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updateaddress-ups.com",nocase; classtype:attempted-recon; sid:200007388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updatecenter01378.myportfolio.com",nocase; classtype:attempted-recon; sid:200007389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updatecenter013780ba.myportfolio.com",nocase; classtype:attempted-recon; sid:200007390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updatess.cfzijxcsp.workers.dev",nocase; classtype:attempted-recon; sid:200007391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updatevoda-billing.com",nocase; classtype:attempted-recon; sid:200007392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ups-parcelservice.com",nocase; classtype:attempted-recon; sid:200007393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ups-service-update.com",nocase; classtype:attempted-recon; sid:200007394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ups-servicedata.com",nocase; classtype:attempted-recon; sid:200007395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ups-serviceupdate.com",nocase; classtype:attempted-recon; sid:200007396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ups-updatedata.com",nocase; classtype:attempted-recon; sid:200007397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"upsdeliverypackage.com",nocase; classtype:attempted-recon; sid:200007398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"upsinfoupdate.com",nocase; classtype:attempted-recon; sid:200007399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"upspackageupdate.com",nocase; classtype:attempted-recon; sid:200007400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"upwlyzgoip.duckdns.org",nocase; classtype:attempted-recon; sid:200007401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uqqbehampx.duckdns.org",nocase; classtype:attempted-recon; sid:200007402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urbr0umcbe74bhs.jlatndsg.repl.co",nocase; classtype:attempted-recon; sid:200007403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uri.im",nocase; classtype:attempted-recon; sid:200007404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"url.fti.or.th",nocase; classtype:attempted-recon; sid:200007405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"url.xcode.no",nocase; classtype:attempted-recon; sid:200007406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urli.ws",nocase; classtype:attempted-recon; sid:200007407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlly.eu",nocase; classtype:attempted-recon; sid:200007408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urnic.com",nocase; classtype:attempted-recon; sid:200007409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urs6rj.hyperphp.com",nocase; classtype:attempted-recon; sid:200007410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urytlcyvqe.duckdns.org",nocase; classtype:attempted-recon; sid:200007411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"us-aol-mail.weebly.com",nocase; classtype:attempted-recon; sid:200007412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"us-brooksrun.top",nocase; classtype:attempted-recon; sid:200007413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"us-east1-decoded-battery-359205.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200007414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"us-east1-diesel-practice-355319.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200007415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"us-east1-fine-blueprint-359703.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200007416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"us-east4-clean-algebra-356021.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200007417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"us-postal-tracking-service-online.builderallwppro.com",nocase; classtype:attempted-recon; sid:200007418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"us-west4-mercurial-idiom-334123.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200007419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usdc-trx.com",nocase; classtype:attempted-recon; sid:200007420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usdt-finance.cc",nocase; classtype:attempted-recon; sid:200007421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usdt-pos.org",nocase; classtype:attempted-recon; sid:200007422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"used-jaccs--jp-login1.workers.dev",nocase; classtype:attempted-recon; sid:200007423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"used-my-connect-au-login6.workers.dev",nocase; classtype:attempted-recon; sid:200007424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"user-mtb01.hufeer.ir",nocase; classtype:attempted-recon; sid:200007425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"user-olivierclemot.flazio.com",nocase; classtype:attempted-recon; sid:200007426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"user.cdn1002941500.review",nocase; classtype:attempted-recon; sid:200007427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"user.cdn8372978423.com",nocase; classtype:attempted-recon; sid:200007428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"userbanco.userbanco.repl.co",nocase; classtype:attempted-recon; sid:200007429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"userboitevocalweb.flazio.com",nocase; classtype:attempted-recon; sid:200007430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"userinformationstoreupdatesmail.pages.dev",nocase; classtype:attempted-recon; sid:200007431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"users.tpg.com.au",nocase; classtype:attempted-recon; sid:200007432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usfn.net",nocase; classtype:attempted-recon; sid:200007433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usp-comtracking.servepics.com",nocase; classtype:attempted-recon; sid:200007434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usp-secure-update.com",nocase; classtype:attempted-recon; sid:200007435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspackagesdelivery.com",nocase; classtype:attempted-recon; sid:200007436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps-parcelservice.com",nocase; classtype:attempted-recon; sid:200007437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps.fail.delivery.ptpnxiv.com",nocase; classtype:attempted-recon; sid:200007438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps05.duckdns.org",nocase; classtype:attempted-recon; sid:200007439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspscity.com",nocase; classtype:attempted-recon; sid:200007440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspsdelivery.myz.info",nocase; classtype:attempted-recon; sid:200007441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspsdeliverypackage.com",nocase; classtype:attempted-recon; sid:200007442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspsservies.com",nocase; classtype:attempted-recon; sid:200007443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ussppss.blogspot.com",nocase; classtype:attempted-recon; sid:200007444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"utjbgywxup.duckdns.org",nocase; classtype:attempted-recon; sid:200007445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"utjblsmvpi.duckdns.org",nocase; classtype:attempted-recon; sid:200007446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"utvpwakvah.duckdns.org",nocase; classtype:attempted-recon; sid:200007447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uv09s6357.riggearf.com",nocase; classtype:attempted-recon; sid:200007448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uvepttrzta.duckdns.org",nocase; classtype:attempted-recon; sid:200007449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uverdnes.cz",nocase; classtype:attempted-recon; sid:200007450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uvkkjmeytg.duckdns.org",nocase; classtype:attempted-recon; sid:200007451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uwlsmqsbrg.duckdns.org",nocase; classtype:attempted-recon; sid:200007452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uwzjcrqdas.duckdns.org",nocase; classtype:attempted-recon; sid:200007453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uxawoulafx.duckdns.org",nocase; classtype:attempted-recon; sid:200007454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uxnevmfqtk.duckdns.org",nocase; classtype:attempted-recon; sid:200007455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uxs8ti.csb.app",nocase; classtype:attempted-recon; sid:200007456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uxwvvgscgh.duckdns.org",nocase; classtype:attempted-recon; sid:200007457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uyataandrrellosvb.liveblog365.com",nocase; classtype:attempted-recon; sid:200007458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uyataoveolandsdfadf.liveblog365.com",nocase; classtype:attempted-recon; sid:200007459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uyeuxxfnvl.duckdns.org",nocase; classtype:attempted-recon; sid:200007460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uynmg.gi2vfqy.cn",nocase; classtype:attempted-recon; sid:200007461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uyryd.birbor.repl.co",nocase; classtype:attempted-recon; sid:200007462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uyuropgymds.ihostfull.com",nocase; classtype:attempted-recon; sid:200007463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v1-web8380.web07.bero-webspace.de",nocase; classtype:attempted-recon; sid:200007464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v1.alpha-raydium.com",nocase; classtype:attempted-recon; sid:200007465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v2.netzwerk-senzig.de",nocase; classtype:attempted-recon; sid:200007466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v5office365-owa6878.microsoftdynamics.workers.dev",nocase; classtype:attempted-recon; sid:200007467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vacation-profile.web.app",nocase; classtype:attempted-recon; sid:200007468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"valarqss.hyperphp.com",nocase; classtype:attempted-recon; sid:200007469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"valenciaoptometry.com",nocase; classtype:attempted-recon; sid:200007470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"valiahorat.hostfree.pw",nocase; classtype:attempted-recon; sid:200007471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"validacionpichincha.odoo.com",nocase; classtype:attempted-recon; sid:200007472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"validargaliciadates.validargalicia.repl.co",nocase; classtype:attempted-recon; sid:200007473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"validatetok.com",nocase; classtype:attempted-recon; sid:200007474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"validatewalletconnect.com",nocase; classtype:attempted-recon; sid:200007475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"validator.syncdefierror.site",nocase; classtype:attempted-recon; sid:200007476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"validatordapps.com",nocase; classtype:attempted-recon; sid:200007477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"validatornode.io",nocase; classtype:attempted-recon; sid:200007478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"validsoporteonline.homegalicia25.repl.co",nocase; classtype:attempted-recon; sid:200007479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"valkonp.top",nocase; classtype:attempted-recon; sid:200007480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vallabee.com",nocase; classtype:attempted-recon; sid:200007481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"valleverde.net.ve",nocase; classtype:attempted-recon; sid:200007482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vallianiaerodetail.com",nocase; classtype:attempted-recon; sid:200007483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"valueded.com",nocase; classtype:attempted-recon; sid:200007484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vb.hyc63.repl.co",nocase; classtype:attempted-recon; sid:200007485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vbcfx.brz0tyi.cn",nocase; classtype:attempted-recon; sid:200007486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vbdf.gpszyy.cn",nocase; classtype:attempted-recon; sid:200007487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vbdf.junry.cn",nocase; classtype:attempted-recon; sid:200007488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vberific.oubrousxa.repl.co",nocase; classtype:attempted-recon; sid:200007489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vbtf.bhxmyyy.cn",nocase; classtype:attempted-recon; sid:200007490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vbwdaojfol.duckdns.org",nocase; classtype:attempted-recon; sid:200007491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vc-107510.weeblysite.com",nocase; classtype:attempted-recon; sid:200007492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vcgf-109148.weeblysite.com",nocase; classtype:attempted-recon; sid:200007493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vcnfovnsjc.duckdns.org",nocase; classtype:attempted-recon; sid:200007494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vcxds.0rha00t.cn",nocase; classtype:attempted-recon; sid:200007495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vcxzs.jfsaoafi.cn",nocase; classtype:attempted-recon; sid:200007496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdb.29631.cn",nocase; classtype:attempted-recon; sid:200007497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdb.75312.cn",nocase; classtype:attempted-recon; sid:200007498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdb.83727.cn",nocase; classtype:attempted-recon; sid:200007499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdb.85921.cn",nocase; classtype:attempted-recon; sid:200007500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdb.87237.cn",nocase; classtype:attempted-recon; sid:200007501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdbd.71261.cn",nocase; classtype:attempted-recon; sid:200007502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdbd.bbszyy.cn",nocase; classtype:attempted-recon; sid:200007503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdbd.dlhszyy.cn",nocase; classtype:attempted-recon; sid:200007504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdbd.ftrdwgm.cn",nocase; classtype:attempted-recon; sid:200007505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdbd.hrszyy.cn",nocase; classtype:attempted-recon; sid:200007506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdbd.huoyanmao.cn",nocase; classtype:attempted-recon; sid:200007507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdbd.nbszyy.cn",nocase; classtype:attempted-recon; sid:200007508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdbdf.72653.cn",nocase; classtype:attempted-recon; sid:200007509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdbdf.mapm6b.cn",nocase; classtype:attempted-recon; sid:200007510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdbnn.93735.cn",nocase; classtype:attempted-recon; sid:200007511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdbsb.ygasdb.cn",nocase; classtype:attempted-recon; sid:200007512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdd.32573.cn",nocase; classtype:attempted-recon; sid:200007513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vddf.67382.cn",nocase; classtype:attempted-recon; sid:200007514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vddf.85917.cn",nocase; classtype:attempted-recon; sid:200007515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vddf.hzjdnqt.cn",nocase; classtype:attempted-recon; sid:200007516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vddfb.92271.cn",nocase; classtype:attempted-recon; sid:200007517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vddrh.mjxrmyy.cn",nocase; classtype:attempted-recon; sid:200007518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdf.73383.cn",nocase; classtype:attempted-recon; sid:200007519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdf.75672.cn",nocase; classtype:attempted-recon; sid:200007520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdf.iuxsghk.cn",nocase; classtype:attempted-recon; sid:200007521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdf.jjjaa.cn",nocase; classtype:attempted-recon; sid:200007522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdf.lrqzrwb.cn",nocase; classtype:attempted-recon; sid:200007523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfb.73295.cn",nocase; classtype:attempted-recon; sid:200007524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfb.89672.cn",nocase; classtype:attempted-recon; sid:200007525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfb.cmwosri.cn",nocase; classtype:attempted-recon; sid:200007526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfbd.32282.cn",nocase; classtype:attempted-recon; sid:200007527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfbd.aqszyy.cn",nocase; classtype:attempted-recon; sid:200007528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfbd.qqmmq.cn",nocase; classtype:attempted-recon; sid:200007529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfbf.73162.cn",nocase; classtype:attempted-recon; sid:200007530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfbf.75237.cn",nocase; classtype:attempted-recon; sid:200007531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfbn.dsxrmyy.cn",nocase; classtype:attempted-recon; sid:200007532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfdbf.75827.cn",nocase; classtype:attempted-recon; sid:200007533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdff.ansrmyy.cn",nocase; classtype:attempted-recon; sid:200007534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdffh.hsxzyy.cn",nocase; classtype:attempted-recon; sid:200007535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfg.r7piugr.cn",nocase; classtype:attempted-recon; sid:200007536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfh.75162.cn",nocase; classtype:attempted-recon; sid:200007537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfh.75381.cn",nocase; classtype:attempted-recon; sid:200007538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfh.82761.cn",nocase; classtype:attempted-recon; sid:200007539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfh.eqowcrk.cn",nocase; classtype:attempted-recon; sid:200007540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfh.kkpqbgm.cn",nocase; classtype:attempted-recon; sid:200007541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfhdf.75239.cn",nocase; classtype:attempted-recon; sid:200007542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfhh.97791.cn",nocase; classtype:attempted-recon; sid:200007543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfn.37659.cn",nocase; classtype:attempted-recon; sid:200007544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdfzn.85725.cn",nocase; classtype:attempted-recon; sid:200007545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdg.32795.cn",nocase; classtype:attempted-recon; sid:200007546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdg.71285.cn",nocase; classtype:attempted-recon; sid:200007547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdg.71362.cn",nocase; classtype:attempted-recon; sid:200007548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdg.72337.cn",nocase; classtype:attempted-recon; sid:200007549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdg.73719.cn",nocase; classtype:attempted-recon; sid:200007550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdg.97767.cn",nocase; classtype:attempted-recon; sid:200007551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdg.fuormqy.cn",nocase; classtype:attempted-recon; sid:200007552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdg.lf5d1pk.cn",nocase; classtype:attempted-recon; sid:200007553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdg.yjliseyh.cn",nocase; classtype:attempted-recon; sid:200007554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdgd.79311.cn",nocase; classtype:attempted-recon; sid:200007555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdgsd.75187.cn",nocase; classtype:attempted-recon; sid:200007556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdh.75112.cn",nocase; classtype:attempted-recon; sid:200007557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdh.lirqfaz.cn",nocase; classtype:attempted-recon; sid:200007558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdhb.tech-stell.cn",nocase; classtype:attempted-recon; sid:200007559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdhr.38762.cn",nocase; classtype:attempted-recon; sid:200007560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdn.79235.cn",nocase; classtype:attempted-recon; sid:200007561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdr.38581.cn",nocase; classtype:attempted-recon; sid:200007562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdrd.75262.cn",nocase; classtype:attempted-recon; sid:200007563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdrg.27519.cn",nocase; classtype:attempted-recon; sid:200007564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdrh.37872.cn",nocase; classtype:attempted-recon; sid:200007565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdrn.89673.cn",nocase; classtype:attempted-recon; sid:200007566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdsb.63179.cn",nocase; classtype:attempted-recon; sid:200007567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdsg.51392.cn",nocase; classtype:attempted-recon; sid:200007568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdsg.68793.cn",nocase; classtype:attempted-recon; sid:200007569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdsg.75911.cn",nocase; classtype:attempted-recon; sid:200007570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdsg.79691.cn",nocase; classtype:attempted-recon; sid:200007571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdvf.kydbkxt.cn",nocase; classtype:attempted-recon; sid:200007572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdxfb.82915.cn",nocase; classtype:attempted-recon; sid:200007573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vdxhr.gsslenv.cn",nocase; classtype:attempted-recon; sid:200007574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"veduviknpe.duckdns.org",nocase; classtype:attempted-recon; sid:200007575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"veeraja.com",nocase; classtype:attempted-recon; sid:200007576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vegr.xmszyy.cn",nocase; classtype:attempted-recon; sid:200007577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vektrofoods.com",nocase; classtype:attempted-recon; sid:200007578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ventas.lnterbarnk.pe.caringcritters.org",nocase; classtype:attempted-recon; sid:200007579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"veoveo.com.vn",nocase; classtype:attempted-recon; sid:200007580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ver-2ji.pages.dev",nocase; classtype:attempted-recon; sid:200007581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"veranope.wwwaz1-ss44.a2hosted.com",nocase; classtype:attempted-recon; sid:200007582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"veraodeoportunidades.com",nocase; classtype:attempted-recon; sid:200007583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verdubs.in.net",nocase; classtype:attempted-recon; sid:200007584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"veredicto63.hostfree.pw",nocase; classtype:attempted-recon; sid:200007585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verfied.f1conshaverifi.repl.co",nocase; classtype:attempted-recon; sid:200007586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verificacionformular.galiciaat.repl.co",nocase; classtype:attempted-recon; sid:200007587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verificadispositivoweb.com",nocase; classtype:attempted-recon; sid:200007588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verification-roundcube.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verification-roundcube.web.app",nocase; classtype:attempted-recon; sid:200007590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verification.fb-page.workers.dev",nocase; classtype:attempted-recon; sid:200007591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verificationmessage.blob.core.windows.net",nocase; classtype:attempted-recon; sid:200007592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verificationmetamask.rf.gd",nocase; classtype:attempted-recon; sid:200007593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifiicacion.galiciausuario.repl.co",nocase; classtype:attempted-recon; sid:200007594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifikasi-akun-anda0011.weeblysite.com",nocase; classtype:attempted-recon; sid:200007595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifikasi-akun-facebook0022.weeblysite.com",nocase; classtype:attempted-recon; sid:200007596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifikasi-identitas0124.webnode.page",nocase; classtype:attempted-recon; sid:200007597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifikasi-indetitas17.webnode.page",nocase; classtype:attempted-recon; sid:200007598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifikasi-pengamanan-akun.weebly.com",nocase; classtype:attempted-recon; sid:200007599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifikasipemulihanfacebook2022.weeblysite.com",nocase; classtype:attempted-recon; sid:200007600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verify-email-e8a07.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verify-email-e8a07.web.app",nocase; classtype:attempted-recon; sid:200007602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verify-nab-auth.com",nocase; classtype:attempted-recon; sid:200007603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verify-revolut.com",nocase; classtype:attempted-recon; sid:200007604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifyandaktivity4cnts.co.vu",nocase; classtype:attempted-recon; sid:200007605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"veriifyac.webcindario.com",nocase; classtype:attempted-recon; sid:200007606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verivikasipagae5apd4tenow220212000.co.vu",nocase; classtype:attempted-recon; sid:200007607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vero0ivg8h0i3erhg-0ivhwer-0ghvbw8-rhfg-80wrhf.obs.ap-southeast-3.myhuaweicloud.com",nocase; classtype:attempted-recon; sid:200007608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"versed-alpine-catshark.glitch.me",nocase; classtype:attempted-recon; sid:200007609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vertubgv0erjht0-gbhewr-0hgbv-0wrhb-0gvhw8f.obs.ap-southeast-2.myhuaweicloud.com",nocase; classtype:attempted-recon; sid:200007610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vetrilsoftware.com",nocase; classtype:attempted-recon; sid:200007611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"veumas.fawmsofppq-xlm41807k3dy.p.runcloud.link",nocase; classtype:attempted-recon; sid:200007612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vewg9e30-5rg-0hwrghvnw-0hf-0whjfr4e4f.obs.ap-southeast-3.myhuaweicloud.com",nocase; classtype:attempted-recon; sid:200007613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfbdh.72571.cn",nocase; classtype:attempted-recon; sid:200007614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfbf.75121.cn",nocase; classtype:attempted-recon; sid:200007615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfbfd.39979.cn",nocase; classtype:attempted-recon; sid:200007616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfbfd.75261.cn",nocase; classtype:attempted-recon; sid:200007617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfbfn.lgxrmyy.cn",nocase; classtype:attempted-recon; sid:200007618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfbg.xdxzyy.cn",nocase; classtype:attempted-recon; sid:200007619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfbtn.zltqzyy.cn",nocase; classtype:attempted-recon; sid:200007620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfd.39179.cn",nocase; classtype:attempted-recon; sid:200007621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfdb.lsszyy.cn",nocase; classtype:attempted-recon; sid:200007622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfdbd.79976.cn",nocase; classtype:attempted-recon; sid:200007623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfdbf.19436c.cn",nocase; classtype:attempted-recon; sid:200007624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfdbf.jyxkypk.cn",nocase; classtype:attempted-recon; sid:200007625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfdf.76837.cn",nocase; classtype:attempted-recon; sid:200007626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfdg.38561.cn",nocase; classtype:attempted-recon; sid:200007627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfdh.79591.cn",nocase; classtype:attempted-recon; sid:200007628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfdh.tcvyhmfs.cn",nocase; classtype:attempted-recon; sid:200007629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfdh.zpdydsp.cn",nocase; classtype:attempted-recon; sid:200007630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfdht.75623.cn",nocase; classtype:attempted-recon; sid:200007631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfdhtr.72797.cn",nocase; classtype:attempted-recon; sid:200007632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfgdh.gbdszyy.cn",nocase; classtype:attempted-recon; sid:200007633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfh.37692.cn",nocase; classtype:attempted-recon; sid:200007634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfnf.toom1168.cn",nocase; classtype:attempted-recon; sid:200007635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfrt.29672.cn",nocase; classtype:attempted-recon; sid:200007636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vftj.leyoulite.cn",nocase; classtype:attempted-recon; sid:200007637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vgdcx.uxfpzt.cn",nocase; classtype:attempted-recon; sid:200007638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vgrbhldoee.duckdns.org",nocase; classtype:attempted-recon; sid:200007639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vgsuugguui.duckdns.org",nocase; classtype:attempted-recon; sid:200007640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vh83we0r4g-v0h3wer0-ghvf0-we3r0-vfergr45gf.obs.af-south-1.myhuaweicloud.com",nocase; classtype:attempted-recon; sid:200007641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vhee.o6cc.cfgliders.com.",nocase; classtype:attempted-recon; sid:200007642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vhntxhfyit.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vhrf.87186.cn",nocase; classtype:attempted-recon; sid:200007644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vhuocynwhx.duckdns.org",nocase; classtype:attempted-recon; sid:200007645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.baflrzt.rest",nocase; classtype:attempted-recon; sid:200007646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.bftggqb.rest",nocase; classtype:attempted-recon; sid:200007647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.bhppmal.rest",nocase; classtype:attempted-recon; sid:200007648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.bkiljbe.rest",nocase; classtype:attempted-recon; sid:200007649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.bwcpfbn.rest",nocase; classtype:attempted-recon; sid:200007650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.cnufsqh.rest",nocase; classtype:attempted-recon; sid:200007651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.ctuhgfk.rest",nocase; classtype:attempted-recon; sid:200007652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.drdsyje.rest",nocase; classtype:attempted-recon; sid:200007653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.dtgskgr.rest",nocase; classtype:attempted-recon; sid:200007654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.dvbkugk.rest",nocase; classtype:attempted-recon; sid:200007655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.dwvwhpm.rest",nocase; classtype:attempted-recon; sid:200007656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.eaplgjq.rest",nocase; classtype:attempted-recon; sid:200007657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.ehsqatn.rest",nocase; classtype:attempted-recon; sid:200007658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.emfeyds.rest",nocase; classtype:attempted-recon; sid:200007659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.fcuccth.rest",nocase; classtype:attempted-recon; sid:200007660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.fikixuj.rest",nocase; classtype:attempted-recon; sid:200007661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.ftpstbj.rest",nocase; classtype:attempted-recon; sid:200007662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.fuivkxa.rest",nocase; classtype:attempted-recon; sid:200007663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.fzjyqpy.rest",nocase; classtype:attempted-recon; sid:200007664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.gemisns.rest",nocase; classtype:attempted-recon; sid:200007665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.ggqugsu.rest",nocase; classtype:attempted-recon; sid:200007666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.gvzoadd.rest",nocase; classtype:attempted-recon; sid:200007667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.gybmzej.rest",nocase; classtype:attempted-recon; sid:200007668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.gywmubl.rest",nocase; classtype:attempted-recon; sid:200007669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.hbzrhor.rest",nocase; classtype:attempted-recon; sid:200007670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.hexttrd.rest",nocase; classtype:attempted-recon; sid:200007671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.hmamatm.rest",nocase; classtype:attempted-recon; sid:200007672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.hqgidqk.rest",nocase; classtype:attempted-recon; sid:200007673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.hymzwrr.rest",nocase; classtype:attempted-recon; sid:200007674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.hynvkvn.rest",nocase; classtype:attempted-recon; sid:200007675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.igsxqxl.rest",nocase; classtype:attempted-recon; sid:200007676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.iktxxwb.rest",nocase; classtype:attempted-recon; sid:200007677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.ipvrmgx.rest",nocase; classtype:attempted-recon; sid:200007678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.iuwqqxo.rest",nocase; classtype:attempted-recon; sid:200007679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.jeseavd.rest",nocase; classtype:attempted-recon; sid:200007680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.jjmxonp.rest",nocase; classtype:attempted-recon; sid:200007681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.kteglik.rest",nocase; classtype:attempted-recon; sid:200007682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.kzoatrc.rest",nocase; classtype:attempted-recon; sid:200007683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.lghbwne.rest",nocase; classtype:attempted-recon; sid:200007684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.lihewoq.rest",nocase; classtype:attempted-recon; sid:200007685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.lmbtnda.rest",nocase; classtype:attempted-recon; sid:200007686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.lmdmaum.rest",nocase; classtype:attempted-recon; sid:200007687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.loszost.rest",nocase; classtype:attempted-recon; sid:200007688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.mbjalki.rest",nocase; classtype:attempted-recon; sid:200007689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.mbwcvge.rest",nocase; classtype:attempted-recon; sid:200007690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.mfbkvgm.rest",nocase; classtype:attempted-recon; sid:200007691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.mrdefgv.rest",nocase; classtype:attempted-recon; sid:200007692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.mrqfkgo.rest",nocase; classtype:attempted-recon; sid:200007693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.mtfamvq.rest",nocase; classtype:attempted-recon; sid:200007694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.needmwo.rest",nocase; classtype:attempted-recon; sid:200007695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.nhqgutl.rest",nocase; classtype:attempted-recon; sid:200007696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.njtawnu.rest",nocase; classtype:attempted-recon; sid:200007697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.nqhviyu.rest",nocase; classtype:attempted-recon; sid:200007698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.ntsckua.rest",nocase; classtype:attempted-recon; sid:200007699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.nulhvqm.rest",nocase; classtype:attempted-recon; sid:200007700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.obfutzz.rest",nocase; classtype:attempted-recon; sid:200007701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.ocsbjyy.rest",nocase; classtype:attempted-recon; sid:200007702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.ogztqfa.rest",nocase; classtype:attempted-recon; sid:200007703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.onggczh.rest",nocase; classtype:attempted-recon; sid:200007704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.ouqcrce.rest",nocase; classtype:attempted-recon; sid:200007705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.ovuydax.rest",nocase; classtype:attempted-recon; sid:200007706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.palxshs.rest",nocase; classtype:attempted-recon; sid:200007707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.pbeozzc.rest",nocase; classtype:attempted-recon; sid:200007708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.pefczzw.rest",nocase; classtype:attempted-recon; sid:200007709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.pfvdgcs.rest",nocase; classtype:attempted-recon; sid:200007710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.poywtcc.rest",nocase; classtype:attempted-recon; sid:200007711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.prcjndo.rest",nocase; classtype:attempted-recon; sid:200007712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.pyamdhg.rest",nocase; classtype:attempted-recon; sid:200007713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.qcgneuj.rest",nocase; classtype:attempted-recon; sid:200007714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.qmvhsgu.rest",nocase; classtype:attempted-recon; sid:200007715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.qthlkxf.rest",nocase; classtype:attempted-recon; sid:200007716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.qtroqhr.rest",nocase; classtype:attempted-recon; sid:200007717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.qwacvnw.rest",nocase; classtype:attempted-recon; sid:200007718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.ranzilm.rest",nocase; classtype:attempted-recon; sid:200007719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.rjwdmhv.rest",nocase; classtype:attempted-recon; sid:200007720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.rkzcxlj.rest",nocase; classtype:attempted-recon; sid:200007721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.rpqqioa.rest",nocase; classtype:attempted-recon; sid:200007722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.rtkpgqb.rest",nocase; classtype:attempted-recon; sid:200007723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.rytdkra.rest",nocase; classtype:attempted-recon; sid:200007724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.syluojt.rest",nocase; classtype:attempted-recon; sid:200007725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.taemnbb.rest",nocase; classtype:attempted-recon; sid:200007726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.thnoceg.rest",nocase; classtype:attempted-recon; sid:200007727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.tiqrcpl.rest",nocase; classtype:attempted-recon; sid:200007728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.ttniksm.rest",nocase; classtype:attempted-recon; sid:200007729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.uddktyy.rest",nocase; classtype:attempted-recon; sid:200007730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.ukzxens.rest",nocase; classtype:attempted-recon; sid:200007731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.ulztbbb.rest",nocase; classtype:attempted-recon; sid:200007732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.vcobpue.rest",nocase; classtype:attempted-recon; sid:200007733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.vtwwkwu.rest",nocase; classtype:attempted-recon; sid:200007734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.wgkkmrd.rest",nocase; classtype:attempted-recon; sid:200007735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.wokutiv.rest",nocase; classtype:attempted-recon; sid:200007736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.xppqjxo.rest",nocase; classtype:attempted-recon; sid:200007737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.xzstmlr.rest",nocase; classtype:attempted-recon; sid:200007738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.ydtfxhz.rest",nocase; classtype:attempted-recon; sid:200007739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.yvlpjam.rest",nocase; classtype:attempted-recon; sid:200007740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.zbshkeo.rest",nocase; classtype:attempted-recon; sid:200007741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.zikhocp.rest",nocase; classtype:attempted-recon; sid:200007742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.zklwhxa.rest",nocase; classtype:attempted-recon; sid:200007743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.zmwmbck.rest",nocase; classtype:attempted-recon; sid:200007744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocenure.visoresiercmsvi.zugzybw.rest",nocase; classtype:attempted-recon; sid:200007745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.baflrzt.rest",nocase; classtype:attempted-recon; sid:200007746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.bftggqb.rest",nocase; classtype:attempted-recon; sid:200007747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.bhppmal.rest",nocase; classtype:attempted-recon; sid:200007748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.bkiljbe.rest",nocase; classtype:attempted-recon; sid:200007749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.bwcpfbn.rest",nocase; classtype:attempted-recon; sid:200007750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.cnufsqh.rest",nocase; classtype:attempted-recon; sid:200007751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.ctuhgfk.rest",nocase; classtype:attempted-recon; sid:200007752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.drdsyje.rest",nocase; classtype:attempted-recon; sid:200007753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.dtgskgr.rest",nocase; classtype:attempted-recon; sid:200007754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.dvbkugk.rest",nocase; classtype:attempted-recon; sid:200007755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.dwvwhpm.rest",nocase; classtype:attempted-recon; sid:200007756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.eaplgjq.rest",nocase; classtype:attempted-recon; sid:200007757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.ehsqatn.rest",nocase; classtype:attempted-recon; sid:200007758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.emfeyds.rest",nocase; classtype:attempted-recon; sid:200007759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.fcuccth.rest",nocase; classtype:attempted-recon; sid:200007760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.fikixuj.rest",nocase; classtype:attempted-recon; sid:200007761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.ftpstbj.rest",nocase; classtype:attempted-recon; sid:200007762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.fuivkxa.rest",nocase; classtype:attempted-recon; sid:200007763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.fzjyqpy.rest",nocase; classtype:attempted-recon; sid:200007764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.gemisns.rest",nocase; classtype:attempted-recon; sid:200007765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.ggqugsu.rest",nocase; classtype:attempted-recon; sid:200007766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.gvzoadd.rest",nocase; classtype:attempted-recon; sid:200007767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.gybmzej.rest",nocase; classtype:attempted-recon; sid:200007768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.gywmubl.rest",nocase; classtype:attempted-recon; sid:200007769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.hbzrhor.rest",nocase; classtype:attempted-recon; sid:200007770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.hexttrd.rest",nocase; classtype:attempted-recon; sid:200007771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.hmamatm.rest",nocase; classtype:attempted-recon; sid:200007772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.hqgidqk.rest",nocase; classtype:attempted-recon; sid:200007773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.hymzwrr.rest",nocase; classtype:attempted-recon; sid:200007774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.hynvkvn.rest",nocase; classtype:attempted-recon; sid:200007775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.igsxqxl.rest",nocase; classtype:attempted-recon; sid:200007776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.iktxxwb.rest",nocase; classtype:attempted-recon; sid:200007777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.ipvrmgx.rest",nocase; classtype:attempted-recon; sid:200007778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.iuwqqxo.rest",nocase; classtype:attempted-recon; sid:200007779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.jeseavd.rest",nocase; classtype:attempted-recon; sid:200007780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.jjmxonp.rest",nocase; classtype:attempted-recon; sid:200007781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.kteglik.rest",nocase; classtype:attempted-recon; sid:200007782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.kzoatrc.rest",nocase; classtype:attempted-recon; sid:200007783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.lghbwne.rest",nocase; classtype:attempted-recon; sid:200007784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.lihewoq.rest",nocase; classtype:attempted-recon; sid:200007785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.lmbtnda.rest",nocase; classtype:attempted-recon; sid:200007786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.lmdmaum.rest",nocase; classtype:attempted-recon; sid:200007787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.loszost.rest",nocase; classtype:attempted-recon; sid:200007788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.mbjalki.rest",nocase; classtype:attempted-recon; sid:200007789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.mbwcvge.rest",nocase; classtype:attempted-recon; sid:200007790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.mfbkvgm.rest",nocase; classtype:attempted-recon; sid:200007791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.mrdefgv.rest",nocase; classtype:attempted-recon; sid:200007792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.mrqfkgo.rest",nocase; classtype:attempted-recon; sid:200007793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.mtfamvq.rest",nocase; classtype:attempted-recon; sid:200007794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.needmwo.rest",nocase; classtype:attempted-recon; sid:200007795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.nhqgutl.rest",nocase; classtype:attempted-recon; sid:200007796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.njtawnu.rest",nocase; classtype:attempted-recon; sid:200007797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.nqhviyu.rest",nocase; classtype:attempted-recon; sid:200007798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.ntsckua.rest",nocase; classtype:attempted-recon; sid:200007799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.nulhvqm.rest",nocase; classtype:attempted-recon; sid:200007800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.obfutzz.rest",nocase; classtype:attempted-recon; sid:200007801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.ocsbjyy.rest",nocase; classtype:attempted-recon; sid:200007802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.ogztqfa.rest",nocase; classtype:attempted-recon; sid:200007803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.onggczh.rest",nocase; classtype:attempted-recon; sid:200007804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.ouqcrce.rest",nocase; classtype:attempted-recon; sid:200007805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.ovuydax.rest",nocase; classtype:attempted-recon; sid:200007806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.palxshs.rest",nocase; classtype:attempted-recon; sid:200007807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.pbeozzc.rest",nocase; classtype:attempted-recon; sid:200007808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.pefczzw.rest",nocase; classtype:attempted-recon; sid:200007809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.pfvdgcs.rest",nocase; classtype:attempted-recon; sid:200007810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.poywtcc.rest",nocase; classtype:attempted-recon; sid:200007811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.prcjndo.rest",nocase; classtype:attempted-recon; sid:200007812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.pyamdhg.rest",nocase; classtype:attempted-recon; sid:200007813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.qcgneuj.rest",nocase; classtype:attempted-recon; sid:200007814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.qmvhsgu.rest",nocase; classtype:attempted-recon; sid:200007815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.qthlkxf.rest",nocase; classtype:attempted-recon; sid:200007816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.qtroqhr.rest",nocase; classtype:attempted-recon; sid:200007817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.qwacvnw.rest",nocase; classtype:attempted-recon; sid:200007818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.ranzilm.rest",nocase; classtype:attempted-recon; sid:200007819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.rjwdmhv.rest",nocase; classtype:attempted-recon; sid:200007820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.rkzcxlj.rest",nocase; classtype:attempted-recon; sid:200007821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.rpqqioa.rest",nocase; classtype:attempted-recon; sid:200007822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.rtkpgqb.rest",nocase; classtype:attempted-recon; sid:200007823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.rytdkra.rest",nocase; classtype:attempted-recon; sid:200007824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.syluojt.rest",nocase; classtype:attempted-recon; sid:200007825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.taemnbb.rest",nocase; classtype:attempted-recon; sid:200007826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.thnoceg.rest",nocase; classtype:attempted-recon; sid:200007827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.tiqrcpl.rest",nocase; classtype:attempted-recon; sid:200007828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.ttniksm.rest",nocase; classtype:attempted-recon; sid:200007829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.uddktyy.rest",nocase; classtype:attempted-recon; sid:200007830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.ukzxens.rest",nocase; classtype:attempted-recon; sid:200007831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.ulztbbb.rest",nocase; classtype:attempted-recon; sid:200007832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.vcobpue.rest",nocase; classtype:attempted-recon; sid:200007833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.vtwwkwu.rest",nocase; classtype:attempted-recon; sid:200007834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.wgkkmrd.rest",nocase; classtype:attempted-recon; sid:200007835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.wokutiv.rest",nocase; classtype:attempted-recon; sid:200007836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.xppqjxo.rest",nocase; classtype:attempted-recon; sid:200007837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.xzstmlr.rest",nocase; classtype:attempted-recon; sid:200007838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.ydtfxhz.rest",nocase; classtype:attempted-recon; sid:200007839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.yvlpjam.rest",nocase; classtype:attempted-recon; sid:200007840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.zbshkeo.rest",nocase; classtype:attempted-recon; sid:200007841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.zikhocp.rest",nocase; classtype:attempted-recon; sid:200007842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.zklwhxa.rest",nocase; classtype:attempted-recon; sid:200007843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.zmwmbck.rest",nocase; classtype:attempted-recon; sid:200007844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioceorcenure.visoreoecssiercmsvi.zugzybw.rest",nocase; classtype:attempted-recon; sid:200007845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.baflrzt.rest",nocase; classtype:attempted-recon; sid:200007846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.bftggqb.rest",nocase; classtype:attempted-recon; sid:200007847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.bhppmal.rest",nocase; classtype:attempted-recon; sid:200007848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.bkiljbe.rest",nocase; classtype:attempted-recon; sid:200007849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.bwcpfbn.rest",nocase; classtype:attempted-recon; sid:200007850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.cnufsqh.rest",nocase; classtype:attempted-recon; sid:200007851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.ctuhgfk.rest",nocase; classtype:attempted-recon; sid:200007852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.drdsyje.rest",nocase; classtype:attempted-recon; sid:200007853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.dtgskgr.rest",nocase; classtype:attempted-recon; sid:200007854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.dvbkugk.rest",nocase; classtype:attempted-recon; sid:200007855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.dwvwhpm.rest",nocase; classtype:attempted-recon; sid:200007856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.eaplgjq.rest",nocase; classtype:attempted-recon; sid:200007857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.ehsqatn.rest",nocase; classtype:attempted-recon; sid:200007858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.emfeyds.rest",nocase; classtype:attempted-recon; sid:200007859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.fcuccth.rest",nocase; classtype:attempted-recon; sid:200007860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.fikixuj.rest",nocase; classtype:attempted-recon; sid:200007861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.ftpstbj.rest",nocase; classtype:attempted-recon; sid:200007862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.fuivkxa.rest",nocase; classtype:attempted-recon; sid:200007863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.fzjyqpy.rest",nocase; classtype:attempted-recon; sid:200007864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.gemisns.rest",nocase; classtype:attempted-recon; sid:200007865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.ggqugsu.rest",nocase; classtype:attempted-recon; sid:200007866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.gvzoadd.rest",nocase; classtype:attempted-recon; sid:200007867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.gybmzej.rest",nocase; classtype:attempted-recon; sid:200007868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.gywmubl.rest",nocase; classtype:attempted-recon; sid:200007869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.hbzrhor.rest",nocase; classtype:attempted-recon; sid:200007870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.hexttrd.rest",nocase; classtype:attempted-recon; sid:200007871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.hmamatm.rest",nocase; classtype:attempted-recon; sid:200007872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.hqgidqk.rest",nocase; classtype:attempted-recon; sid:200007873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.hymzwrr.rest",nocase; classtype:attempted-recon; sid:200007874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.hynvkvn.rest",nocase; classtype:attempted-recon; sid:200007875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.igsxqxl.rest",nocase; classtype:attempted-recon; sid:200007876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.iktxxwb.rest",nocase; classtype:attempted-recon; sid:200007877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.ipvrmgx.rest",nocase; classtype:attempted-recon; sid:200007878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.iuwqqxo.rest",nocase; classtype:attempted-recon; sid:200007879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.jeseavd.rest",nocase; classtype:attempted-recon; sid:200007880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.jjmxonp.rest",nocase; classtype:attempted-recon; sid:200007881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.kteglik.rest",nocase; classtype:attempted-recon; sid:200007882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.kzoatrc.rest",nocase; classtype:attempted-recon; sid:200007883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.lghbwne.rest",nocase; classtype:attempted-recon; sid:200007884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.lihewoq.rest",nocase; classtype:attempted-recon; sid:200007885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.lmbtnda.rest",nocase; classtype:attempted-recon; sid:200007886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.lmdmaum.rest",nocase; classtype:attempted-recon; sid:200007887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.loszost.rest",nocase; classtype:attempted-recon; sid:200007888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.mbjalki.rest",nocase; classtype:attempted-recon; sid:200007889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.mbwcvge.rest",nocase; classtype:attempted-recon; sid:200007890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.mfbkvgm.rest",nocase; classtype:attempted-recon; sid:200007891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.mrdefgv.rest",nocase; classtype:attempted-recon; sid:200007892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.mrqfkgo.rest",nocase; classtype:attempted-recon; sid:200007893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.mtfamvq.rest",nocase; classtype:attempted-recon; sid:200007894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.needmwo.rest",nocase; classtype:attempted-recon; sid:200007895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.nhqgutl.rest",nocase; classtype:attempted-recon; sid:200007896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.njtawnu.rest",nocase; classtype:attempted-recon; sid:200007897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.nqhviyu.rest",nocase; classtype:attempted-recon; sid:200007898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.ntsckua.rest",nocase; classtype:attempted-recon; sid:200007899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.nulhvqm.rest",nocase; classtype:attempted-recon; sid:200007900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.obfutzz.rest",nocase; classtype:attempted-recon; sid:200007901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.ocsbjyy.rest",nocase; classtype:attempted-recon; sid:200007902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.ogztqfa.rest",nocase; classtype:attempted-recon; sid:200007903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.onggczh.rest",nocase; classtype:attempted-recon; sid:200007904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.ouqcrce.rest",nocase; classtype:attempted-recon; sid:200007905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.ovuydax.rest",nocase; classtype:attempted-recon; sid:200007906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.palxshs.rest",nocase; classtype:attempted-recon; sid:200007907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.pbeozzc.rest",nocase; classtype:attempted-recon; sid:200007908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.pefczzw.rest",nocase; classtype:attempted-recon; sid:200007909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.pfvdgcs.rest",nocase; classtype:attempted-recon; sid:200007910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.poywtcc.rest",nocase; classtype:attempted-recon; sid:200007911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.prcjndo.rest",nocase; classtype:attempted-recon; sid:200007912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.pyamdhg.rest",nocase; classtype:attempted-recon; sid:200007913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.qcgneuj.rest",nocase; classtype:attempted-recon; sid:200007914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.qmvhsgu.rest",nocase; classtype:attempted-recon; sid:200007915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.qthlkxf.rest",nocase; classtype:attempted-recon; sid:200007916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.qtroqhr.rest",nocase; classtype:attempted-recon; sid:200007917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.qwacvnw.rest",nocase; classtype:attempted-recon; sid:200007918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.ranzilm.rest",nocase; classtype:attempted-recon; sid:200007919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.rjwdmhv.rest",nocase; classtype:attempted-recon; sid:200007920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.rkzcxlj.rest",nocase; classtype:attempted-recon; sid:200007921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.rpqqioa.rest",nocase; classtype:attempted-recon; sid:200007922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.rtkpgqb.rest",nocase; classtype:attempted-recon; sid:200007923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.rytdkra.rest",nocase; classtype:attempted-recon; sid:200007924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.syluojt.rest",nocase; classtype:attempted-recon; sid:200007925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.taemnbb.rest",nocase; classtype:attempted-recon; sid:200007926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.thnoceg.rest",nocase; classtype:attempted-recon; sid:200007927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.tiqrcpl.rest",nocase; classtype:attempted-recon; sid:200007928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.ttniksm.rest",nocase; classtype:attempted-recon; sid:200007929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.uddktyy.rest",nocase; classtype:attempted-recon; sid:200007930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.ukzxens.rest",nocase; classtype:attempted-recon; sid:200007931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.ulztbbb.rest",nocase; classtype:attempted-recon; sid:200007932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.vcobpue.rest",nocase; classtype:attempted-recon; sid:200007933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.vtwwkwu.rest",nocase; classtype:attempted-recon; sid:200007934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.wgkkmrd.rest",nocase; classtype:attempted-recon; sid:200007935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.wokutiv.rest",nocase; classtype:attempted-recon; sid:200007936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.xppqjxo.rest",nocase; classtype:attempted-recon; sid:200007937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.xzstmlr.rest",nocase; classtype:attempted-recon; sid:200007938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.ydtfxhz.rest",nocase; classtype:attempted-recon; sid:200007939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.yvlpjam.rest",nocase; classtype:attempted-recon; sid:200007940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.zbshkeo.rest",nocase; classtype:attempted-recon; sid:200007941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.zikhocp.rest",nocase; classtype:attempted-recon; sid:200007942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.zklwhxa.rest",nocase; classtype:attempted-recon; sid:200007943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.zmwmbck.rest",nocase; classtype:attempted-recon; sid:200007944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocercenure.visoreoecssvxarercmsvi.zugzybw.rest",nocase; classtype:attempted-recon; sid:200007945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.baflrzt.rest",nocase; classtype:attempted-recon; sid:200007946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.bftggqb.rest",nocase; classtype:attempted-recon; sid:200007947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.bhppmal.rest",nocase; classtype:attempted-recon; sid:200007948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.bkiljbe.rest",nocase; classtype:attempted-recon; sid:200007949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.bwcpfbn.rest",nocase; classtype:attempted-recon; sid:200007950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.cnufsqh.rest",nocase; classtype:attempted-recon; sid:200007951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.ctuhgfk.rest",nocase; classtype:attempted-recon; sid:200007952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.drdsyje.rest",nocase; classtype:attempted-recon; sid:200007953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.dtgskgr.rest",nocase; classtype:attempted-recon; sid:200007954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.dvbkugk.rest",nocase; classtype:attempted-recon; sid:200007955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.dwvwhpm.rest",nocase; classtype:attempted-recon; sid:200007956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.eaplgjq.rest",nocase; classtype:attempted-recon; sid:200007957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.ehsqatn.rest",nocase; classtype:attempted-recon; sid:200007958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.emfeyds.rest",nocase; classtype:attempted-recon; sid:200007959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.fcuccth.rest",nocase; classtype:attempted-recon; sid:200007960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.fikixuj.rest",nocase; classtype:attempted-recon; sid:200007961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.ftpstbj.rest",nocase; classtype:attempted-recon; sid:200007962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.fuivkxa.rest",nocase; classtype:attempted-recon; sid:200007963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.fzjyqpy.rest",nocase; classtype:attempted-recon; sid:200007964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.gemisns.rest",nocase; classtype:attempted-recon; sid:200007965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.ggqugsu.rest",nocase; classtype:attempted-recon; sid:200007966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.gvzoadd.rest",nocase; classtype:attempted-recon; sid:200007967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.gybmzej.rest",nocase; classtype:attempted-recon; sid:200007968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.gywmubl.rest",nocase; classtype:attempted-recon; sid:200007969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.hbzrhor.rest",nocase; classtype:attempted-recon; sid:200007970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.hexttrd.rest",nocase; classtype:attempted-recon; sid:200007971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.hmamatm.rest",nocase; classtype:attempted-recon; sid:200007972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.hqgidqk.rest",nocase; classtype:attempted-recon; sid:200007973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.hymzwrr.rest",nocase; classtype:attempted-recon; sid:200007974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.hynvkvn.rest",nocase; classtype:attempted-recon; sid:200007975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.igsxqxl.rest",nocase; classtype:attempted-recon; sid:200007976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.iktxxwb.rest",nocase; classtype:attempted-recon; sid:200007977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.ipvrmgx.rest",nocase; classtype:attempted-recon; sid:200007978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.iuwqqxo.rest",nocase; classtype:attempted-recon; sid:200007979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.jeseavd.rest",nocase; classtype:attempted-recon; sid:200007980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.jjmxonp.rest",nocase; classtype:attempted-recon; sid:200007981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.kteglik.rest",nocase; classtype:attempted-recon; sid:200007982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.kzoatrc.rest",nocase; classtype:attempted-recon; sid:200007983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.lghbwne.rest",nocase; classtype:attempted-recon; sid:200007984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.lihewoq.rest",nocase; classtype:attempted-recon; sid:200007985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.lmbtnda.rest",nocase; classtype:attempted-recon; sid:200007986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.lmdmaum.rest",nocase; classtype:attempted-recon; sid:200007987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.loszost.rest",nocase; classtype:attempted-recon; sid:200007988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.mbjalki.rest",nocase; classtype:attempted-recon; sid:200007989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.mbwcvge.rest",nocase; classtype:attempted-recon; sid:200007990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.mfbkvgm.rest",nocase; classtype:attempted-recon; sid:200007991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.mrdefgv.rest",nocase; classtype:attempted-recon; sid:200007992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.mrqfkgo.rest",nocase; classtype:attempted-recon; sid:200007993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.mtfamvq.rest",nocase; classtype:attempted-recon; sid:200007994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.needmwo.rest",nocase; classtype:attempted-recon; sid:200007995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.nhqgutl.rest",nocase; classtype:attempted-recon; sid:200007996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.njtawnu.rest",nocase; classtype:attempted-recon; sid:200007997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.nqhviyu.rest",nocase; classtype:attempted-recon; sid:200007998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.ntsckua.rest",nocase; classtype:attempted-recon; sid:200007999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.nulhvqm.rest",nocase; classtype:attempted-recon; sid:200008000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.obfutzz.rest",nocase; classtype:attempted-recon; sid:200008001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.ocsbjyy.rest",nocase; classtype:attempted-recon; sid:200008002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.ogztqfa.rest",nocase; classtype:attempted-recon; sid:200008003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.onggczh.rest",nocase; classtype:attempted-recon; sid:200008004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.ouqcrce.rest",nocase; classtype:attempted-recon; sid:200008005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.ovuydax.rest",nocase; classtype:attempted-recon; sid:200008006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.palxshs.rest",nocase; classtype:attempted-recon; sid:200008007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.pbeozzc.rest",nocase; classtype:attempted-recon; sid:200008008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.pefczzw.rest",nocase; classtype:attempted-recon; sid:200008009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.pfvdgcs.rest",nocase; classtype:attempted-recon; sid:200008010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.poywtcc.rest",nocase; classtype:attempted-recon; sid:200008011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.prcjndo.rest",nocase; classtype:attempted-recon; sid:200008012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.pyamdhg.rest",nocase; classtype:attempted-recon; sid:200008013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.qcgneuj.rest",nocase; classtype:attempted-recon; sid:200008014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.qmvhsgu.rest",nocase; classtype:attempted-recon; sid:200008015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.qthlkxf.rest",nocase; classtype:attempted-recon; sid:200008016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.qtroqhr.rest",nocase; classtype:attempted-recon; sid:200008017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.qwacvnw.rest",nocase; classtype:attempted-recon; sid:200008018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.ranzilm.rest",nocase; classtype:attempted-recon; sid:200008019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.rjwdmhv.rest",nocase; classtype:attempted-recon; sid:200008020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.rkzcxlj.rest",nocase; classtype:attempted-recon; sid:200008021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.rpqqioa.rest",nocase; classtype:attempted-recon; sid:200008022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.rtkpgqb.rest",nocase; classtype:attempted-recon; sid:200008023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.rytdkra.rest",nocase; classtype:attempted-recon; sid:200008024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.syluojt.rest",nocase; classtype:attempted-recon; sid:200008025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.taemnbb.rest",nocase; classtype:attempted-recon; sid:200008026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.thnoceg.rest",nocase; classtype:attempted-recon; sid:200008027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.tiqrcpl.rest",nocase; classtype:attempted-recon; sid:200008028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.ttniksm.rest",nocase; classtype:attempted-recon; sid:200008029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.uddktyy.rest",nocase; classtype:attempted-recon; sid:200008030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.ukzxens.rest",nocase; classtype:attempted-recon; sid:200008031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.ulztbbb.rest",nocase; classtype:attempted-recon; sid:200008032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.vcobpue.rest",nocase; classtype:attempted-recon; sid:200008033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.vtwwkwu.rest",nocase; classtype:attempted-recon; sid:200008034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.wgkkmrd.rest",nocase; classtype:attempted-recon; sid:200008035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.wokutiv.rest",nocase; classtype:attempted-recon; sid:200008036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.xppqjxo.rest",nocase; classtype:attempted-recon; sid:200008037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.xzstmlr.rest",nocase; classtype:attempted-recon; sid:200008038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.ydtfxhz.rest",nocase; classtype:attempted-recon; sid:200008039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.yvlpjam.rest",nocase; classtype:attempted-recon; sid:200008040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.zbshkeo.rest",nocase; classtype:attempted-recon; sid:200008041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.zikhocp.rest",nocase; classtype:attempted-recon; sid:200008042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.zklwhxa.rest",nocase; classtype:attempted-recon; sid:200008043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.zmwmbck.rest",nocase; classtype:attempted-recon; sid:200008044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiocure.visorcsiercmsvi.zugzybw.rest",nocase; classtype:attempted-recon; sid:200008045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.baflrzt.rest",nocase; classtype:attempted-recon; sid:200008046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.bftggqb.rest",nocase; classtype:attempted-recon; sid:200008047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.bhppmal.rest",nocase; classtype:attempted-recon; sid:200008048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.bkiljbe.rest",nocase; classtype:attempted-recon; sid:200008049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.bwcpfbn.rest",nocase; classtype:attempted-recon; sid:200008050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.cnufsqh.rest",nocase; classtype:attempted-recon; sid:200008051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.ctuhgfk.rest",nocase; classtype:attempted-recon; sid:200008052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.drdsyje.rest",nocase; classtype:attempted-recon; sid:200008053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.dtgskgr.rest",nocase; classtype:attempted-recon; sid:200008054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.dvbkugk.rest",nocase; classtype:attempted-recon; sid:200008055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.dwvwhpm.rest",nocase; classtype:attempted-recon; sid:200008056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.eaplgjq.rest",nocase; classtype:attempted-recon; sid:200008057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.ehsqatn.rest",nocase; classtype:attempted-recon; sid:200008058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.emfeyds.rest",nocase; classtype:attempted-recon; sid:200008059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.fcuccth.rest",nocase; classtype:attempted-recon; sid:200008060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.fikixuj.rest",nocase; classtype:attempted-recon; sid:200008061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.ftpstbj.rest",nocase; classtype:attempted-recon; sid:200008062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.fuivkxa.rest",nocase; classtype:attempted-recon; sid:200008063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.fzjyqpy.rest",nocase; classtype:attempted-recon; sid:200008064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.gemisns.rest",nocase; classtype:attempted-recon; sid:200008065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.ggqugsu.rest",nocase; classtype:attempted-recon; sid:200008066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.gvzoadd.rest",nocase; classtype:attempted-recon; sid:200008067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.gybmzej.rest",nocase; classtype:attempted-recon; sid:200008068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.gywmubl.rest",nocase; classtype:attempted-recon; sid:200008069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.hbzrhor.rest",nocase; classtype:attempted-recon; sid:200008070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.hexttrd.rest",nocase; classtype:attempted-recon; sid:200008071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.hmamatm.rest",nocase; classtype:attempted-recon; sid:200008072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.hqgidqk.rest",nocase; classtype:attempted-recon; sid:200008073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.hymzwrr.rest",nocase; classtype:attempted-recon; sid:200008074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.hynvkvn.rest",nocase; classtype:attempted-recon; sid:200008075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.igsxqxl.rest",nocase; classtype:attempted-recon; sid:200008076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.iktxxwb.rest",nocase; classtype:attempted-recon; sid:200008077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.ipvrmgx.rest",nocase; classtype:attempted-recon; sid:200008078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.iuwqqxo.rest",nocase; classtype:attempted-recon; sid:200008079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.jeseavd.rest",nocase; classtype:attempted-recon; sid:200008080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.jjmxonp.rest",nocase; classtype:attempted-recon; sid:200008081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.kteglik.rest",nocase; classtype:attempted-recon; sid:200008082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.kzoatrc.rest",nocase; classtype:attempted-recon; sid:200008083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.lghbwne.rest",nocase; classtype:attempted-recon; sid:200008084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.lihewoq.rest",nocase; classtype:attempted-recon; sid:200008085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.lmbtnda.rest",nocase; classtype:attempted-recon; sid:200008086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.lmdmaum.rest",nocase; classtype:attempted-recon; sid:200008087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.loszost.rest",nocase; classtype:attempted-recon; sid:200008088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.mbjalki.rest",nocase; classtype:attempted-recon; sid:200008089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.mbwcvge.rest",nocase; classtype:attempted-recon; sid:200008090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.mfbkvgm.rest",nocase; classtype:attempted-recon; sid:200008091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.mrdefgv.rest",nocase; classtype:attempted-recon; sid:200008092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.mrqfkgo.rest",nocase; classtype:attempted-recon; sid:200008093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.mtfamvq.rest",nocase; classtype:attempted-recon; sid:200008094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.needmwo.rest",nocase; classtype:attempted-recon; sid:200008095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.nhqgutl.rest",nocase; classtype:attempted-recon; sid:200008096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.njtawnu.rest",nocase; classtype:attempted-recon; sid:200008097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.nqhviyu.rest",nocase; classtype:attempted-recon; sid:200008098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.ntsckua.rest",nocase; classtype:attempted-recon; sid:200008099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.nulhvqm.rest",nocase; classtype:attempted-recon; sid:200008100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.obfutzz.rest",nocase; classtype:attempted-recon; sid:200008101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.ocsbjyy.rest",nocase; classtype:attempted-recon; sid:200008102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.ogztqfa.rest",nocase; classtype:attempted-recon; sid:200008103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.onggczh.rest",nocase; classtype:attempted-recon; sid:200008104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.ouqcrce.rest",nocase; classtype:attempted-recon; sid:200008105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.ovuydax.rest",nocase; classtype:attempted-recon; sid:200008106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.palxshs.rest",nocase; classtype:attempted-recon; sid:200008107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.pbeozzc.rest",nocase; classtype:attempted-recon; sid:200008108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.pefczzw.rest",nocase; classtype:attempted-recon; sid:200008109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.pfvdgcs.rest",nocase; classtype:attempted-recon; sid:200008110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.poywtcc.rest",nocase; classtype:attempted-recon; sid:200008111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.prcjndo.rest",nocase; classtype:attempted-recon; sid:200008112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.pyamdhg.rest",nocase; classtype:attempted-recon; sid:200008113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.qcgneuj.rest",nocase; classtype:attempted-recon; sid:200008114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.qmvhsgu.rest",nocase; classtype:attempted-recon; sid:200008115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.qthlkxf.rest",nocase; classtype:attempted-recon; sid:200008116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.qtroqhr.rest",nocase; classtype:attempted-recon; sid:200008117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.qwacvnw.rest",nocase; classtype:attempted-recon; sid:200008118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.ranzilm.rest",nocase; classtype:attempted-recon; sid:200008119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.rjwdmhv.rest",nocase; classtype:attempted-recon; sid:200008120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.rkzcxlj.rest",nocase; classtype:attempted-recon; sid:200008121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.rpqqioa.rest",nocase; classtype:attempted-recon; sid:200008122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.rtkpgqb.rest",nocase; classtype:attempted-recon; sid:200008123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.rytdkra.rest",nocase; classtype:attempted-recon; sid:200008124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.syluojt.rest",nocase; classtype:attempted-recon; sid:200008125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.taemnbb.rest",nocase; classtype:attempted-recon; sid:200008126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.thnoceg.rest",nocase; classtype:attempted-recon; sid:200008127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.tiqrcpl.rest",nocase; classtype:attempted-recon; sid:200008128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.ttniksm.rest",nocase; classtype:attempted-recon; sid:200008129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.uddktyy.rest",nocase; classtype:attempted-recon; sid:200008130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.ukzxens.rest",nocase; classtype:attempted-recon; sid:200008131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.ulztbbb.rest",nocase; classtype:attempted-recon; sid:200008132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.vcobpue.rest",nocase; classtype:attempted-recon; sid:200008133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.vtwwkwu.rest",nocase; classtype:attempted-recon; sid:200008134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.wgkkmrd.rest",nocase; classtype:attempted-recon; sid:200008135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.wokutiv.rest",nocase; classtype:attempted-recon; sid:200008136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.xppqjxo.rest",nocase; classtype:attempted-recon; sid:200008137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.xzstmlr.rest",nocase; classtype:attempted-recon; sid:200008138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.ydtfxhz.rest",nocase; classtype:attempted-recon; sid:200008139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.yvlpjam.rest",nocase; classtype:attempted-recon; sid:200008140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.zbshkeo.rest",nocase; classtype:attempted-recon; sid:200008141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.zikhocp.rest",nocase; classtype:attempted-recon; sid:200008142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.zklwhxa.rest",nocase; classtype:attempted-recon; sid:200008143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.zmwmbck.rest",nocase; classtype:attempted-recon; sid:200008144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianioorcecure.visorcoecssiercmsvi.zugzybw.rest",nocase; classtype:attempted-recon; sid:200008145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.baflrzt.rest",nocase; classtype:attempted-recon; sid:200008146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.bftggqb.rest",nocase; classtype:attempted-recon; sid:200008147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.bhppmal.rest",nocase; classtype:attempted-recon; sid:200008148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.bkiljbe.rest",nocase; classtype:attempted-recon; sid:200008149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.bwcpfbn.rest",nocase; classtype:attempted-recon; sid:200008150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.cnufsqh.rest",nocase; classtype:attempted-recon; sid:200008151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.ctuhgfk.rest",nocase; classtype:attempted-recon; sid:200008152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.drdsyje.rest",nocase; classtype:attempted-recon; sid:200008153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.dtgskgr.rest",nocase; classtype:attempted-recon; sid:200008154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.dvbkugk.rest",nocase; classtype:attempted-recon; sid:200008155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.dwvwhpm.rest",nocase; classtype:attempted-recon; sid:200008156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.eaplgjq.rest",nocase; classtype:attempted-recon; sid:200008157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.ehsqatn.rest",nocase; classtype:attempted-recon; sid:200008158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.emfeyds.rest",nocase; classtype:attempted-recon; sid:200008159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.fcuccth.rest",nocase; classtype:attempted-recon; sid:200008160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.fikixuj.rest",nocase; classtype:attempted-recon; sid:200008161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.ftpstbj.rest",nocase; classtype:attempted-recon; sid:200008162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.fuivkxa.rest",nocase; classtype:attempted-recon; sid:200008163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.fzjyqpy.rest",nocase; classtype:attempted-recon; sid:200008164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.gemisns.rest",nocase; classtype:attempted-recon; sid:200008165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.ggqugsu.rest",nocase; classtype:attempted-recon; sid:200008166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.gvzoadd.rest",nocase; classtype:attempted-recon; sid:200008167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.gybmzej.rest",nocase; classtype:attempted-recon; sid:200008168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.gywmubl.rest",nocase; classtype:attempted-recon; sid:200008169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.hbzrhor.rest",nocase; classtype:attempted-recon; sid:200008170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.hexttrd.rest",nocase; classtype:attempted-recon; sid:200008171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.hmamatm.rest",nocase; classtype:attempted-recon; sid:200008172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.hqgidqk.rest",nocase; classtype:attempted-recon; sid:200008173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.hymzwrr.rest",nocase; classtype:attempted-recon; sid:200008174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.hynvkvn.rest",nocase; classtype:attempted-recon; sid:200008175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.igsxqxl.rest",nocase; classtype:attempted-recon; sid:200008176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.iktxxwb.rest",nocase; classtype:attempted-recon; sid:200008177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.ipvrmgx.rest",nocase; classtype:attempted-recon; sid:200008178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.iuwqqxo.rest",nocase; classtype:attempted-recon; sid:200008179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.jeseavd.rest",nocase; classtype:attempted-recon; sid:200008180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.jjmxonp.rest",nocase; classtype:attempted-recon; sid:200008181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.kteglik.rest",nocase; classtype:attempted-recon; sid:200008182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.kzoatrc.rest",nocase; classtype:attempted-recon; sid:200008183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.lghbwne.rest",nocase; classtype:attempted-recon; sid:200008184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.lihewoq.rest",nocase; classtype:attempted-recon; sid:200008185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.lmbtnda.rest",nocase; classtype:attempted-recon; sid:200008186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.lmdmaum.rest",nocase; classtype:attempted-recon; sid:200008187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.loszost.rest",nocase; classtype:attempted-recon; sid:200008188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.mbjalki.rest",nocase; classtype:attempted-recon; sid:200008189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.mbwcvge.rest",nocase; classtype:attempted-recon; sid:200008190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.mfbkvgm.rest",nocase; classtype:attempted-recon; sid:200008191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.mrdefgv.rest",nocase; classtype:attempted-recon; sid:200008192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.mrqfkgo.rest",nocase; classtype:attempted-recon; sid:200008193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.mtfamvq.rest",nocase; classtype:attempted-recon; sid:200008194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.needmwo.rest",nocase; classtype:attempted-recon; sid:200008195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.nhqgutl.rest",nocase; classtype:attempted-recon; sid:200008196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.njtawnu.rest",nocase; classtype:attempted-recon; sid:200008197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.nqhviyu.rest",nocase; classtype:attempted-recon; sid:200008198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.ntsckua.rest",nocase; classtype:attempted-recon; sid:200008199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.nulhvqm.rest",nocase; classtype:attempted-recon; sid:200008200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.obfutzz.rest",nocase; classtype:attempted-recon; sid:200008201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.ocsbjyy.rest",nocase; classtype:attempted-recon; sid:200008202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.ogztqfa.rest",nocase; classtype:attempted-recon; sid:200008203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.onggczh.rest",nocase; classtype:attempted-recon; sid:200008204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.ouqcrce.rest",nocase; classtype:attempted-recon; sid:200008205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.ovuydax.rest",nocase; classtype:attempted-recon; sid:200008206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.palxshs.rest",nocase; classtype:attempted-recon; sid:200008207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.pbeozzc.rest",nocase; classtype:attempted-recon; sid:200008208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.pefczzw.rest",nocase; classtype:attempted-recon; sid:200008209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.pfvdgcs.rest",nocase; classtype:attempted-recon; sid:200008210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.poywtcc.rest",nocase; classtype:attempted-recon; sid:200008211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.prcjndo.rest",nocase; classtype:attempted-recon; sid:200008212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.pyamdhg.rest",nocase; classtype:attempted-recon; sid:200008213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.qcgneuj.rest",nocase; classtype:attempted-recon; sid:200008214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.qmvhsgu.rest",nocase; classtype:attempted-recon; sid:200008215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.qthlkxf.rest",nocase; classtype:attempted-recon; sid:200008216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.qtroqhr.rest",nocase; classtype:attempted-recon; sid:200008217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.qwacvnw.rest",nocase; classtype:attempted-recon; sid:200008218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.ranzilm.rest",nocase; classtype:attempted-recon; sid:200008219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.rjwdmhv.rest",nocase; classtype:attempted-recon; sid:200008220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.rkzcxlj.rest",nocase; classtype:attempted-recon; sid:200008221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.rpqqioa.rest",nocase; classtype:attempted-recon; sid:200008222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.rtkpgqb.rest",nocase; classtype:attempted-recon; sid:200008223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.rytdkra.rest",nocase; classtype:attempted-recon; sid:200008224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.syluojt.rest",nocase; classtype:attempted-recon; sid:200008225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.taemnbb.rest",nocase; classtype:attempted-recon; sid:200008226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.thnoceg.rest",nocase; classtype:attempted-recon; sid:200008227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.tiqrcpl.rest",nocase; classtype:attempted-recon; sid:200008228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.ttniksm.rest",nocase; classtype:attempted-recon; sid:200008229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.uddktyy.rest",nocase; classtype:attempted-recon; sid:200008230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.ukzxens.rest",nocase; classtype:attempted-recon; sid:200008231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.ulztbbb.rest",nocase; classtype:attempted-recon; sid:200008232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.vcobpue.rest",nocase; classtype:attempted-recon; sid:200008233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.vtwwkwu.rest",nocase; classtype:attempted-recon; sid:200008234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.wgkkmrd.rest",nocase; classtype:attempted-recon; sid:200008235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.wokutiv.rest",nocase; classtype:attempted-recon; sid:200008236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.xppqjxo.rest",nocase; classtype:attempted-recon; sid:200008237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.xzstmlr.rest",nocase; classtype:attempted-recon; sid:200008238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.ydtfxhz.rest",nocase; classtype:attempted-recon; sid:200008239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.yvlpjam.rest",nocase; classtype:attempted-recon; sid:200008240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.zbshkeo.rest",nocase; classtype:attempted-recon; sid:200008241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.zikhocp.rest",nocase; classtype:attempted-recon; sid:200008242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.zklwhxa.rest",nocase; classtype:attempted-recon; sid:200008243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.zmwmbck.rest",nocase; classtype:attempted-recon; sid:200008244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianiorcecure.visorcoecssvxarercmsvi.zugzybw.rest",nocase; classtype:attempted-recon; sid:200008245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.baflrzt.rest",nocase; classtype:attempted-recon; sid:200008246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.bftggqb.rest",nocase; classtype:attempted-recon; sid:200008247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.bhppmal.rest",nocase; classtype:attempted-recon; sid:200008248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.bkiljbe.rest",nocase; classtype:attempted-recon; sid:200008249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.bwcpfbn.rest",nocase; classtype:attempted-recon; sid:200008250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.cnufsqh.rest",nocase; classtype:attempted-recon; sid:200008251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.ctuhgfk.rest",nocase; classtype:attempted-recon; sid:200008252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.drdsyje.rest",nocase; classtype:attempted-recon; sid:200008253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.dtgskgr.rest",nocase; classtype:attempted-recon; sid:200008254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.dvbkugk.rest",nocase; classtype:attempted-recon; sid:200008255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.dwvwhpm.rest",nocase; classtype:attempted-recon; sid:200008256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.eaplgjq.rest",nocase; classtype:attempted-recon; sid:200008257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.ehsqatn.rest",nocase; classtype:attempted-recon; sid:200008258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.emfeyds.rest",nocase; classtype:attempted-recon; sid:200008259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.fcuccth.rest",nocase; classtype:attempted-recon; sid:200008260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.fikixuj.rest",nocase; classtype:attempted-recon; sid:200008261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.ftpstbj.rest",nocase; classtype:attempted-recon; sid:200008262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.fuivkxa.rest",nocase; classtype:attempted-recon; sid:200008263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.fzjyqpy.rest",nocase; classtype:attempted-recon; sid:200008264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.gemisns.rest",nocase; classtype:attempted-recon; sid:200008265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.ggqugsu.rest",nocase; classtype:attempted-recon; sid:200008266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.gvzoadd.rest",nocase; classtype:attempted-recon; sid:200008267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.gybmzej.rest",nocase; classtype:attempted-recon; sid:200008268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.gywmubl.rest",nocase; classtype:attempted-recon; sid:200008269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.hbzrhor.rest",nocase; classtype:attempted-recon; sid:200008270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.hexttrd.rest",nocase; classtype:attempted-recon; sid:200008271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.hmamatm.rest",nocase; classtype:attempted-recon; sid:200008272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.hqgidqk.rest",nocase; classtype:attempted-recon; sid:200008273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.hymzwrr.rest",nocase; classtype:attempted-recon; sid:200008274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.hynvkvn.rest",nocase; classtype:attempted-recon; sid:200008275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.igsxqxl.rest",nocase; classtype:attempted-recon; sid:200008276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.iktxxwb.rest",nocase; classtype:attempted-recon; sid:200008277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.ipvrmgx.rest",nocase; classtype:attempted-recon; sid:200008278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.iuwqqxo.rest",nocase; classtype:attempted-recon; sid:200008279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.jeseavd.rest",nocase; classtype:attempted-recon; sid:200008280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.jjmxonp.rest",nocase; classtype:attempted-recon; sid:200008281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.kteglik.rest",nocase; classtype:attempted-recon; sid:200008282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.kzoatrc.rest",nocase; classtype:attempted-recon; sid:200008283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.lghbwne.rest",nocase; classtype:attempted-recon; sid:200008284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.lihewoq.rest",nocase; classtype:attempted-recon; sid:200008285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.lmbtnda.rest",nocase; classtype:attempted-recon; sid:200008286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.lmdmaum.rest",nocase; classtype:attempted-recon; sid:200008287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.loszost.rest",nocase; classtype:attempted-recon; sid:200008288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.mbjalki.rest",nocase; classtype:attempted-recon; sid:200008289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.mbwcvge.rest",nocase; classtype:attempted-recon; sid:200008290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.mfbkvgm.rest",nocase; classtype:attempted-recon; sid:200008291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.mrdefgv.rest",nocase; classtype:attempted-recon; sid:200008292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.mrqfkgo.rest",nocase; classtype:attempted-recon; sid:200008293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.mtfamvq.rest",nocase; classtype:attempted-recon; sid:200008294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.needmwo.rest",nocase; classtype:attempted-recon; sid:200008295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.nhqgutl.rest",nocase; classtype:attempted-recon; sid:200008296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.njtawnu.rest",nocase; classtype:attempted-recon; sid:200008297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.nqhviyu.rest",nocase; classtype:attempted-recon; sid:200008298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.ntsckua.rest",nocase; classtype:attempted-recon; sid:200008299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.nulhvqm.rest",nocase; classtype:attempted-recon; sid:200008300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.obfutzz.rest",nocase; classtype:attempted-recon; sid:200008301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.ocsbjyy.rest",nocase; classtype:attempted-recon; sid:200008302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.ogztqfa.rest",nocase; classtype:attempted-recon; sid:200008303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.onggczh.rest",nocase; classtype:attempted-recon; sid:200008304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.ouqcrce.rest",nocase; classtype:attempted-recon; sid:200008305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.ovuydax.rest",nocase; classtype:attempted-recon; sid:200008306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.palxshs.rest",nocase; classtype:attempted-recon; sid:200008307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.pbeozzc.rest",nocase; classtype:attempted-recon; sid:200008308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.pefczzw.rest",nocase; classtype:attempted-recon; sid:200008309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.pfvdgcs.rest",nocase; classtype:attempted-recon; sid:200008310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.poywtcc.rest",nocase; classtype:attempted-recon; sid:200008311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.prcjndo.rest",nocase; classtype:attempted-recon; sid:200008312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.pyamdhg.rest",nocase; classtype:attempted-recon; sid:200008313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.qcgneuj.rest",nocase; classtype:attempted-recon; sid:200008314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.qmvhsgu.rest",nocase; classtype:attempted-recon; sid:200008315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.qthlkxf.rest",nocase; classtype:attempted-recon; sid:200008316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.qtroqhr.rest",nocase; classtype:attempted-recon; sid:200008317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.qwacvnw.rest",nocase; classtype:attempted-recon; sid:200008318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.ranzilm.rest",nocase; classtype:attempted-recon; sid:200008319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.rjwdmhv.rest",nocase; classtype:attempted-recon; sid:200008320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.rkzcxlj.rest",nocase; classtype:attempted-recon; sid:200008321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.rpqqioa.rest",nocase; classtype:attempted-recon; sid:200008322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.rtkpgqb.rest",nocase; classtype:attempted-recon; sid:200008323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.rytdkra.rest",nocase; classtype:attempted-recon; sid:200008324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.syluojt.rest",nocase; classtype:attempted-recon; sid:200008325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.taemnbb.rest",nocase; classtype:attempted-recon; sid:200008326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.thnoceg.rest",nocase; classtype:attempted-recon; sid:200008327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.tiqrcpl.rest",nocase; classtype:attempted-recon; sid:200008328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.ttniksm.rest",nocase; classtype:attempted-recon; sid:200008329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.uddktyy.rest",nocase; classtype:attempted-recon; sid:200008330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.ukzxens.rest",nocase; classtype:attempted-recon; sid:200008331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.ulztbbb.rest",nocase; classtype:attempted-recon; sid:200008332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.vcobpue.rest",nocase; classtype:attempted-recon; sid:200008333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.vtwwkwu.rest",nocase; classtype:attempted-recon; sid:200008334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.wgkkmrd.rest",nocase; classtype:attempted-recon; sid:200008335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.wokutiv.rest",nocase; classtype:attempted-recon; sid:200008336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.xppqjxo.rest",nocase; classtype:attempted-recon; sid:200008337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.xzstmlr.rest",nocase; classtype:attempted-recon; sid:200008338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.ydtfxhz.rest",nocase; classtype:attempted-recon; sid:200008339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.yvlpjam.rest",nocase; classtype:attempted-recon; sid:200008340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.zbshkeo.rest",nocase; classtype:attempted-recon; sid:200008341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.zikhocp.rest",nocase; classtype:attempted-recon; sid:200008342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.zklwhxa.rest",nocase; classtype:attempted-recon; sid:200008343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.zmwmbck.rest",nocase; classtype:attempted-recon; sid:200008344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vianocenure.visoresiercvxarevi.zugzybw.rest",nocase; classtype:attempted-recon; sid:200008345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.accunn.id",nocase; classtype:attempted-recon; sid:200008346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.arowal.id",nocase; classtype:attempted-recon; sid:200008347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.asciqo.id",nocase; classtype:attempted-recon; sid:200008348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.bomgwz.id",nocase; classtype:attempted-recon; sid:200008349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.bypiqw.id",nocase; classtype:attempted-recon; sid:200008350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.ciuwoo.id",nocase; classtype:attempted-recon; sid:200008351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.cmoqdm.id",nocase; classtype:attempted-recon; sid:200008352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.cufjaj.id",nocase; classtype:attempted-recon; sid:200008353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.czaoxt.id",nocase; classtype:attempted-recon; sid:200008354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.eaezlo.id",nocase; classtype:attempted-recon; sid:200008355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.egrhtq.id",nocase; classtype:attempted-recon; sid:200008356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.eickib.id",nocase; classtype:attempted-recon; sid:200008357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.epcyai.id",nocase; classtype:attempted-recon; sid:200008358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.fdtieg.id",nocase; classtype:attempted-recon; sid:200008359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.fjfuni.id",nocase; classtype:attempted-recon; sid:200008360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.fkbwav.id",nocase; classtype:attempted-recon; sid:200008361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.gbaluw.id",nocase; classtype:attempted-recon; sid:200008362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.gkaxhu.id",nocase; classtype:attempted-recon; sid:200008363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.gpaqia.id",nocase; classtype:attempted-recon; sid:200008364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.gykmlg.id",nocase; classtype:attempted-recon; sid:200008365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.gyyiwk.id",nocase; classtype:attempted-recon; sid:200008366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.hbzhrq.id",nocase; classtype:attempted-recon; sid:200008367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.hilrzx.id",nocase; classtype:attempted-recon; sid:200008368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.hloymq.id",nocase; classtype:attempted-recon; sid:200008369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.hqnjab.id",nocase; classtype:attempted-recon; sid:200008370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.iclxtv.id",nocase; classtype:attempted-recon; sid:200008371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.iikuie.id",nocase; classtype:attempted-recon; sid:200008372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.jlxkma.id",nocase; classtype:attempted-recon; sid:200008373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.jqlcwt.id",nocase; classtype:attempted-recon; sid:200008374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.jvahcx.id",nocase; classtype:attempted-recon; sid:200008375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.jzuxde.id",nocase; classtype:attempted-recon; sid:200008376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.khlzjd.id",nocase; classtype:attempted-recon; sid:200008377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.krxqdo.id",nocase; classtype:attempted-recon; sid:200008378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.ksbgin.id",nocase; classtype:attempted-recon; sid:200008379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.lndzay.id",nocase; classtype:attempted-recon; sid:200008380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.lxxdeq.id",nocase; classtype:attempted-recon; sid:200008381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.lyiqnd.id",nocase; classtype:attempted-recon; sid:200008382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.lyxyuf.id",nocase; classtype:attempted-recon; sid:200008383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.mbjhhd.id",nocase; classtype:attempted-recon; sid:200008384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.mhlvfi.id",nocase; classtype:attempted-recon; sid:200008385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.mifikv.id",nocase; classtype:attempted-recon; sid:200008386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.mqvjkr.id",nocase; classtype:attempted-recon; sid:200008387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.mrinog.id",nocase; classtype:attempted-recon; sid:200008388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.nbzllz.id",nocase; classtype:attempted-recon; sid:200008389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.nsyflm.id",nocase; classtype:attempted-recon; sid:200008390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.ntdght.id",nocase; classtype:attempted-recon; sid:200008391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.ovpzzh.id",nocase; classtype:attempted-recon; sid:200008392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.pdzcxc.id",nocase; classtype:attempted-recon; sid:200008393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.podujg.id",nocase; classtype:attempted-recon; sid:200008394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.pvqbdr.id",nocase; classtype:attempted-recon; sid:200008395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.qigfcj.id",nocase; classtype:attempted-recon; sid:200008396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.rdinpk.id",nocase; classtype:attempted-recon; sid:200008397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.rqrpjt.id",nocase; classtype:attempted-recon; sid:200008398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.rzyssw.id",nocase; classtype:attempted-recon; sid:200008399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.sfqlok.id",nocase; classtype:attempted-recon; sid:200008400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.ukpvop.id",nocase; classtype:attempted-recon; sid:200008401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.upblku.id",nocase; classtype:attempted-recon; sid:200008402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.uuppfm.id",nocase; classtype:attempted-recon; sid:200008403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.wfzola.id",nocase; classtype:attempted-recon; sid:200008404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.wgkngu.id",nocase; classtype:attempted-recon; sid:200008405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.whdeeh.id",nocase; classtype:attempted-recon; sid:200008406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.xkpjpw.id",nocase; classtype:attempted-recon; sid:200008407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.xqjgyc.id",nocase; classtype:attempted-recon; sid:200008408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.xutdbc.id",nocase; classtype:attempted-recon; sid:200008409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.yabztv.id",nocase; classtype:attempted-recon; sid:200008410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.yvzlne.id",nocase; classtype:attempted-recon; sid:200008411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.zcyttz.id",nocase; classtype:attempted-recon; sid:200008412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.zdknwh.id",nocase; classtype:attempted-recon; sid:200008413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.ziehxi.id",nocase; classtype:attempted-recon; sid:200008414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.zkxahi.id",nocase; classtype:attempted-recon; sid:200008415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.zmjezy.id",nocase; classtype:attempted-recon; sid:200008416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.zuaswx.id",nocase; classtype:attempted-recon; sid:200008417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.accunn.id",nocase; classtype:attempted-recon; sid:200008418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.arowal.id",nocase; classtype:attempted-recon; sid:200008419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.asciqo.id",nocase; classtype:attempted-recon; sid:200008420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.bomgwz.id",nocase; classtype:attempted-recon; sid:200008421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.bypiqw.id",nocase; classtype:attempted-recon; sid:200008422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.ciuwoo.id",nocase; classtype:attempted-recon; sid:200008423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.cmoqdm.id",nocase; classtype:attempted-recon; sid:200008424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.cufjaj.id",nocase; classtype:attempted-recon; sid:200008425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.czaoxt.id",nocase; classtype:attempted-recon; sid:200008426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.eaezlo.id",nocase; classtype:attempted-recon; sid:200008427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.egrhtq.id",nocase; classtype:attempted-recon; sid:200008428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.eickib.id",nocase; classtype:attempted-recon; sid:200008429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.epcyai.id",nocase; classtype:attempted-recon; sid:200008430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.fjfuni.id",nocase; classtype:attempted-recon; sid:200008431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.fkbwav.id",nocase; classtype:attempted-recon; sid:200008432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.gbaluw.id",nocase; classtype:attempted-recon; sid:200008433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.gkaxhu.id",nocase; classtype:attempted-recon; sid:200008434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.gpaqia.id",nocase; classtype:attempted-recon; sid:200008435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.gykmlg.id",nocase; classtype:attempted-recon; sid:200008436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.gyyiwk.id",nocase; classtype:attempted-recon; sid:200008437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.hbzhrq.id",nocase; classtype:attempted-recon; sid:200008438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.hilrzx.id",nocase; classtype:attempted-recon; sid:200008439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.hloymq.id",nocase; classtype:attempted-recon; sid:200008440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.hqnjab.id",nocase; classtype:attempted-recon; sid:200008441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.iclxtv.id",nocase; classtype:attempted-recon; sid:200008442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.iikuie.id",nocase; classtype:attempted-recon; sid:200008443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.jlxkma.id",nocase; classtype:attempted-recon; sid:200008444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.jqlcwt.id",nocase; classtype:attempted-recon; sid:200008445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.jvahcx.id",nocase; classtype:attempted-recon; sid:200008446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.jzuxde.id",nocase; classtype:attempted-recon; sid:200008447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.khlzjd.id",nocase; classtype:attempted-recon; sid:200008448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.krxqdo.id",nocase; classtype:attempted-recon; sid:200008449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.ksbgin.id",nocase; classtype:attempted-recon; sid:200008450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.lndzay.id",nocase; classtype:attempted-recon; sid:200008451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.lxxdeq.id",nocase; classtype:attempted-recon; sid:200008452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.lyiqnd.id",nocase; classtype:attempted-recon; sid:200008453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.lyxyuf.id",nocase; classtype:attempted-recon; sid:200008454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.mbjhhd.id",nocase; classtype:attempted-recon; sid:200008455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.mhlvfi.id",nocase; classtype:attempted-recon; sid:200008456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.mifikv.id",nocase; classtype:attempted-recon; sid:200008457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.mqvjkr.id",nocase; classtype:attempted-recon; sid:200008458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.mrinog.id",nocase; classtype:attempted-recon; sid:200008459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.nbzllz.id",nocase; classtype:attempted-recon; sid:200008460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.nsyflm.id",nocase; classtype:attempted-recon; sid:200008461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.ntdght.id",nocase; classtype:attempted-recon; sid:200008462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.ovpzzh.id",nocase; classtype:attempted-recon; sid:200008463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.pdzcxc.id",nocase; classtype:attempted-recon; sid:200008464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.podujg.id",nocase; classtype:attempted-recon; sid:200008465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.pvqbdr.id",nocase; classtype:attempted-recon; sid:200008466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.qigfcj.id",nocase; classtype:attempted-recon; sid:200008467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.rdinpk.id",nocase; classtype:attempted-recon; sid:200008468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.rqrpjt.id",nocase; classtype:attempted-recon; sid:200008469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.rzyssw.id",nocase; classtype:attempted-recon; sid:200008470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.sfqlok.id",nocase; classtype:attempted-recon; sid:200008471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.ukpvop.id",nocase; classtype:attempted-recon; sid:200008472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.upblku.id",nocase; classtype:attempted-recon; sid:200008473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.uuppfm.id",nocase; classtype:attempted-recon; sid:200008474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.wfzola.id",nocase; classtype:attempted-recon; sid:200008475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.wgkngu.id",nocase; classtype:attempted-recon; sid:200008476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.whdeeh.id",nocase; classtype:attempted-recon; sid:200008477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.xkpjpw.id",nocase; classtype:attempted-recon; sid:200008478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.xqjgyc.id",nocase; classtype:attempted-recon; sid:200008479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.xutdbc.id",nocase; classtype:attempted-recon; sid:200008480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.yabztv.id",nocase; classtype:attempted-recon; sid:200008481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.yvzlne.id",nocase; classtype:attempted-recon; sid:200008482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.zcyttz.id",nocase; classtype:attempted-recon; sid:200008483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.zdknwh.id",nocase; classtype:attempted-recon; sid:200008484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.ziehxi.id",nocase; classtype:attempted-recon; sid:200008485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.zkxahi.id",nocase; classtype:attempted-recon; sid:200008486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.zmjezy.id",nocase; classtype:attempted-recon; sid:200008487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.zuaswx.id",nocase; classtype:attempted-recon; sid:200008488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.accunn.id",nocase; classtype:attempted-recon; sid:200008489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.arowal.id",nocase; classtype:attempted-recon; sid:200008490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.asciqo.id",nocase; classtype:attempted-recon; sid:200008491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.bomgwz.id",nocase; classtype:attempted-recon; sid:200008492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.bypiqw.id",nocase; classtype:attempted-recon; sid:200008493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.ciuwoo.id",nocase; classtype:attempted-recon; sid:200008494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.cmoqdm.id",nocase; classtype:attempted-recon; sid:200008495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.cufjaj.id",nocase; classtype:attempted-recon; sid:200008496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.czaoxt.id",nocase; classtype:attempted-recon; sid:200008497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.eaezlo.id",nocase; classtype:attempted-recon; sid:200008498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.egrhtq.id",nocase; classtype:attempted-recon; sid:200008499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.eickib.id",nocase; classtype:attempted-recon; sid:200008500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.epcyai.id",nocase; classtype:attempted-recon; sid:200008501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.fdtieg.id",nocase; classtype:attempted-recon; sid:200008502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.fjfuni.id",nocase; classtype:attempted-recon; sid:200008503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.fkbwav.id",nocase; classtype:attempted-recon; sid:200008504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.gbaluw.id",nocase; classtype:attempted-recon; sid:200008505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.gkaxhu.id",nocase; classtype:attempted-recon; sid:200008506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.gpaqia.id",nocase; classtype:attempted-recon; sid:200008507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.gykmlg.id",nocase; classtype:attempted-recon; sid:200008508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.gyyiwk.id",nocase; classtype:attempted-recon; sid:200008509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.hbzhrq.id",nocase; classtype:attempted-recon; sid:200008510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.hilrzx.id",nocase; classtype:attempted-recon; sid:200008511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.hloymq.id",nocase; classtype:attempted-recon; sid:200008512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.hqnjab.id",nocase; classtype:attempted-recon; sid:200008513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.iclxtv.id",nocase; classtype:attempted-recon; sid:200008514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.iikuie.id",nocase; classtype:attempted-recon; sid:200008515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.jlxkma.id",nocase; classtype:attempted-recon; sid:200008516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.jqlcwt.id",nocase; classtype:attempted-recon; sid:200008517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.jvahcx.id",nocase; classtype:attempted-recon; sid:200008518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.jzuxde.id",nocase; classtype:attempted-recon; sid:200008519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.khlzjd.id",nocase; classtype:attempted-recon; sid:200008520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.krxqdo.id",nocase; classtype:attempted-recon; sid:200008521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.ksbgin.id",nocase; classtype:attempted-recon; sid:200008522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.lndzay.id",nocase; classtype:attempted-recon; sid:200008523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.lxxdeq.id",nocase; classtype:attempted-recon; sid:200008524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.lyiqnd.id",nocase; classtype:attempted-recon; sid:200008525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.lyxyuf.id",nocase; classtype:attempted-recon; sid:200008526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.mbjhhd.id",nocase; classtype:attempted-recon; sid:200008527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.mhlvfi.id",nocase; classtype:attempted-recon; sid:200008528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.mifikv.id",nocase; classtype:attempted-recon; sid:200008529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.mqvjkr.id",nocase; classtype:attempted-recon; sid:200008530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.mrinog.id",nocase; classtype:attempted-recon; sid:200008531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.nbzllz.id",nocase; classtype:attempted-recon; sid:200008532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.nsyflm.id",nocase; classtype:attempted-recon; sid:200008533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.ntdght.id",nocase; classtype:attempted-recon; sid:200008534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.ovpzzh.id",nocase; classtype:attempted-recon; sid:200008535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.pdzcxc.id",nocase; classtype:attempted-recon; sid:200008536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.podujg.id",nocase; classtype:attempted-recon; sid:200008537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.pvqbdr.id",nocase; classtype:attempted-recon; sid:200008538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.qigfcj.id",nocase; classtype:attempted-recon; sid:200008539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.rdinpk.id",nocase; classtype:attempted-recon; sid:200008540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.rqrpjt.id",nocase; classtype:attempted-recon; sid:200008541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.rzyssw.id",nocase; classtype:attempted-recon; sid:200008542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.sfqlok.id",nocase; classtype:attempted-recon; sid:200008543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.ukpvop.id",nocase; classtype:attempted-recon; sid:200008544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.upblku.id",nocase; classtype:attempted-recon; sid:200008545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.uuppfm.id",nocase; classtype:attempted-recon; sid:200008546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.wfzola.id",nocase; classtype:attempted-recon; sid:200008547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.wgkngu.id",nocase; classtype:attempted-recon; sid:200008548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.whdeeh.id",nocase; classtype:attempted-recon; sid:200008549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.xkpjpw.id",nocase; classtype:attempted-recon; sid:200008550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.xqjgyc.id",nocase; classtype:attempted-recon; sid:200008551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.xutdbc.id",nocase; classtype:attempted-recon; sid:200008552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.yabztv.id",nocase; classtype:attempted-recon; sid:200008553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.yvzlne.id",nocase; classtype:attempted-recon; sid:200008554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.zcyttz.id",nocase; classtype:attempted-recon; sid:200008555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.zdknwh.id",nocase; classtype:attempted-recon; sid:200008556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.ziehxi.id",nocase; classtype:attempted-recon; sid:200008557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.zkxahi.id",nocase; classtype:attempted-recon; sid:200008558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.zmjezy.id",nocase; classtype:attempted-recon; sid:200008559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.zuaswx.id",nocase; classtype:attempted-recon; sid:200008560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.accunn.id",nocase; classtype:attempted-recon; sid:200008561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.arowal.id",nocase; classtype:attempted-recon; sid:200008562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.asciqo.id",nocase; classtype:attempted-recon; sid:200008563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.bomgwz.id",nocase; classtype:attempted-recon; sid:200008564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.bypiqw.id",nocase; classtype:attempted-recon; sid:200008565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.ciuwoo.id",nocase; classtype:attempted-recon; sid:200008566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.cmoqdm.id",nocase; classtype:attempted-recon; sid:200008567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.cufjaj.id",nocase; classtype:attempted-recon; sid:200008568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.czaoxt.id",nocase; classtype:attempted-recon; sid:200008569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.eaezlo.id",nocase; classtype:attempted-recon; sid:200008570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.egrhtq.id",nocase; classtype:attempted-recon; sid:200008571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.eickib.id",nocase; classtype:attempted-recon; sid:200008572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.epcyai.id",nocase; classtype:attempted-recon; sid:200008573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.fdtieg.id",nocase; classtype:attempted-recon; sid:200008574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.fjfuni.id",nocase; classtype:attempted-recon; sid:200008575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.fkbwav.id",nocase; classtype:attempted-recon; sid:200008576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.gbaluw.id",nocase; classtype:attempted-recon; sid:200008577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.gkaxhu.id",nocase; classtype:attempted-recon; sid:200008578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.gpaqia.id",nocase; classtype:attempted-recon; sid:200008579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.gykmlg.id",nocase; classtype:attempted-recon; sid:200008580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.gyyiwk.id",nocase; classtype:attempted-recon; sid:200008581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.hbzhrq.id",nocase; classtype:attempted-recon; sid:200008582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.hilrzx.id",nocase; classtype:attempted-recon; sid:200008583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.hloymq.id",nocase; classtype:attempted-recon; sid:200008584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.hqnjab.id",nocase; classtype:attempted-recon; sid:200008585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.iclxtv.id",nocase; classtype:attempted-recon; sid:200008586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.iikuie.id",nocase; classtype:attempted-recon; sid:200008587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.jlxkma.id",nocase; classtype:attempted-recon; sid:200008588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.jqlcwt.id",nocase; classtype:attempted-recon; sid:200008589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.jvahcx.id",nocase; classtype:attempted-recon; sid:200008590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.jzuxde.id",nocase; classtype:attempted-recon; sid:200008591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.khlzjd.id",nocase; classtype:attempted-recon; sid:200008592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.krxqdo.id",nocase; classtype:attempted-recon; sid:200008593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.ksbgin.id",nocase; classtype:attempted-recon; sid:200008594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.lndzay.id",nocase; classtype:attempted-recon; sid:200008595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.lxxdeq.id",nocase; classtype:attempted-recon; sid:200008596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.lyiqnd.id",nocase; classtype:attempted-recon; sid:200008597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.lyxyuf.id",nocase; classtype:attempted-recon; sid:200008598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.mbjhhd.id",nocase; classtype:attempted-recon; sid:200008599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.mhlvfi.id",nocase; classtype:attempted-recon; sid:200008600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.mifikv.id",nocase; classtype:attempted-recon; sid:200008601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.mqvjkr.id",nocase; classtype:attempted-recon; sid:200008602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.mrinog.id",nocase; classtype:attempted-recon; sid:200008603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.nbzllz.id",nocase; classtype:attempted-recon; sid:200008604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.nsyflm.id",nocase; classtype:attempted-recon; sid:200008605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.ntdght.id",nocase; classtype:attempted-recon; sid:200008606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.ovpzzh.id",nocase; classtype:attempted-recon; sid:200008607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.pdzcxc.id",nocase; classtype:attempted-recon; sid:200008608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.podujg.id",nocase; classtype:attempted-recon; sid:200008609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.pvqbdr.id",nocase; classtype:attempted-recon; sid:200008610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.qigfcj.id",nocase; classtype:attempted-recon; sid:200008611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.rdinpk.id",nocase; classtype:attempted-recon; sid:200008612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.rqrpjt.id",nocase; classtype:attempted-recon; sid:200008613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.rzyssw.id",nocase; classtype:attempted-recon; sid:200008614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.sfqlok.id",nocase; classtype:attempted-recon; sid:200008615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.ukpvop.id",nocase; classtype:attempted-recon; sid:200008616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.upblku.id",nocase; classtype:attempted-recon; sid:200008617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.uuppfm.id",nocase; classtype:attempted-recon; sid:200008618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.wfzola.id",nocase; classtype:attempted-recon; sid:200008619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.wgkngu.id",nocase; classtype:attempted-recon; sid:200008620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.whdeeh.id",nocase; classtype:attempted-recon; sid:200008621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.xkpjpw.id",nocase; classtype:attempted-recon; sid:200008622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.xqjgyc.id",nocase; classtype:attempted-recon; sid:200008623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.xutdbc.id",nocase; classtype:attempted-recon; sid:200008624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.yabztv.id",nocase; classtype:attempted-recon; sid:200008625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.yvzlne.id",nocase; classtype:attempted-recon; sid:200008626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.zcyttz.id",nocase; classtype:attempted-recon; sid:200008627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.zdknwh.id",nocase; classtype:attempted-recon; sid:200008628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.ziehxi.id",nocase; classtype:attempted-recon; sid:200008629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.zkxahi.id",nocase; classtype:attempted-recon; sid:200008630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.zmjezy.id",nocase; classtype:attempted-recon; sid:200008631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.zuaswx.id",nocase; classtype:attempted-recon; sid:200008632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.accunn.id",nocase; classtype:attempted-recon; sid:200008633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.arowal.id",nocase; classtype:attempted-recon; sid:200008634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.asciqo.id",nocase; classtype:attempted-recon; sid:200008635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.bomgwz.id",nocase; classtype:attempted-recon; sid:200008636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.bypiqw.id",nocase; classtype:attempted-recon; sid:200008637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.ciuwoo.id",nocase; classtype:attempted-recon; sid:200008638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.cmoqdm.id",nocase; classtype:attempted-recon; sid:200008639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.cufjaj.id",nocase; classtype:attempted-recon; sid:200008640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.czaoxt.id",nocase; classtype:attempted-recon; sid:200008641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.eaezlo.id",nocase; classtype:attempted-recon; sid:200008642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.egrhtq.id",nocase; classtype:attempted-recon; sid:200008643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.eickib.id",nocase; classtype:attempted-recon; sid:200008644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.epcyai.id",nocase; classtype:attempted-recon; sid:200008645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.fdtieg.id",nocase; classtype:attempted-recon; sid:200008646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.fjfuni.id",nocase; classtype:attempted-recon; sid:200008647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.fkbwav.id",nocase; classtype:attempted-recon; sid:200008648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.gbaluw.id",nocase; classtype:attempted-recon; sid:200008649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.gkaxhu.id",nocase; classtype:attempted-recon; sid:200008650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.gpaqia.id",nocase; classtype:attempted-recon; sid:200008651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.gykmlg.id",nocase; classtype:attempted-recon; sid:200008652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.gyyiwk.id",nocase; classtype:attempted-recon; sid:200008653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.hbzhrq.id",nocase; classtype:attempted-recon; sid:200008654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.hilrzx.id",nocase; classtype:attempted-recon; sid:200008655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.hloymq.id",nocase; classtype:attempted-recon; sid:200008656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.hqnjab.id",nocase; classtype:attempted-recon; sid:200008657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.iclxtv.id",nocase; classtype:attempted-recon; sid:200008658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.iikuie.id",nocase; classtype:attempted-recon; sid:200008659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.jlxkma.id",nocase; classtype:attempted-recon; sid:200008660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.jqlcwt.id",nocase; classtype:attempted-recon; sid:200008661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.jvahcx.id",nocase; classtype:attempted-recon; sid:200008662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.jzuxde.id",nocase; classtype:attempted-recon; sid:200008663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.khlzjd.id",nocase; classtype:attempted-recon; sid:200008664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.krxqdo.id",nocase; classtype:attempted-recon; sid:200008665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.ksbgin.id",nocase; classtype:attempted-recon; sid:200008666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.lndzay.id",nocase; classtype:attempted-recon; sid:200008667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.lxxdeq.id",nocase; classtype:attempted-recon; sid:200008668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.lyiqnd.id",nocase; classtype:attempted-recon; sid:200008669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.lyxyuf.id",nocase; classtype:attempted-recon; sid:200008670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.mbjhhd.id",nocase; classtype:attempted-recon; sid:200008671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.mhlvfi.id",nocase; classtype:attempted-recon; sid:200008672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.mifikv.id",nocase; classtype:attempted-recon; sid:200008673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.mqvjkr.id",nocase; classtype:attempted-recon; sid:200008674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.mrinog.id",nocase; classtype:attempted-recon; sid:200008675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.nbzllz.id",nocase; classtype:attempted-recon; sid:200008676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.nsyflm.id",nocase; classtype:attempted-recon; sid:200008677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.ntdght.id",nocase; classtype:attempted-recon; sid:200008678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.ovpzzh.id",nocase; classtype:attempted-recon; sid:200008679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.pdzcxc.id",nocase; classtype:attempted-recon; sid:200008680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.podujg.id",nocase; classtype:attempted-recon; sid:200008681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.pvqbdr.id",nocase; classtype:attempted-recon; sid:200008682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.qigfcj.id",nocase; classtype:attempted-recon; sid:200008683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.rdinpk.id",nocase; classtype:attempted-recon; sid:200008684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.rqrpjt.id",nocase; classtype:attempted-recon; sid:200008685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.rzyssw.id",nocase; classtype:attempted-recon; sid:200008686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.sfqlok.id",nocase; classtype:attempted-recon; sid:200008687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.ukpvop.id",nocase; classtype:attempted-recon; sid:200008688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.upblku.id",nocase; classtype:attempted-recon; sid:200008689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.uuppfm.id",nocase; classtype:attempted-recon; sid:200008690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.wfzola.id",nocase; classtype:attempted-recon; sid:200008691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.wgkngu.id",nocase; classtype:attempted-recon; sid:200008692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.whdeeh.id",nocase; classtype:attempted-recon; sid:200008693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.xkpjpw.id",nocase; classtype:attempted-recon; sid:200008694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.xqjgyc.id",nocase; classtype:attempted-recon; sid:200008695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.xutdbc.id",nocase; classtype:attempted-recon; sid:200008696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.yabztv.id",nocase; classtype:attempted-recon; sid:200008697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.yvzlne.id",nocase; classtype:attempted-recon; sid:200008698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.zcyttz.id",nocase; classtype:attempted-recon; sid:200008699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.zdknwh.id",nocase; classtype:attempted-recon; sid:200008700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.ziehxi.id",nocase; classtype:attempted-recon; sid:200008701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.zkxahi.id",nocase; classtype:attempted-recon; sid:200008702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.zmjezy.id",nocase; classtype:attempted-recon; sid:200008703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.zuaswx.id",nocase; classtype:attempted-recon; sid:200008704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.accunn.id",nocase; classtype:attempted-recon; sid:200008705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.arowal.id",nocase; classtype:attempted-recon; sid:200008706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.asciqo.id",nocase; classtype:attempted-recon; sid:200008707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.bomgwz.id",nocase; classtype:attempted-recon; sid:200008708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.bypiqw.id",nocase; classtype:attempted-recon; sid:200008709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.ciuwoo.id",nocase; classtype:attempted-recon; sid:200008710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.cmoqdm.id",nocase; classtype:attempted-recon; sid:200008711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.cufjaj.id",nocase; classtype:attempted-recon; sid:200008712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.czaoxt.id",nocase; classtype:attempted-recon; sid:200008713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.eaezlo.id",nocase; classtype:attempted-recon; sid:200008714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.egrhtq.id",nocase; classtype:attempted-recon; sid:200008715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.eickib.id",nocase; classtype:attempted-recon; sid:200008716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.epcyai.id",nocase; classtype:attempted-recon; sid:200008717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.fdtieg.id",nocase; classtype:attempted-recon; sid:200008718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.fjfuni.id",nocase; classtype:attempted-recon; sid:200008719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.fkbwav.id",nocase; classtype:attempted-recon; sid:200008720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.gbaluw.id",nocase; classtype:attempted-recon; sid:200008721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.gkaxhu.id",nocase; classtype:attempted-recon; sid:200008722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.gpaqia.id",nocase; classtype:attempted-recon; sid:200008723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.gykmlg.id",nocase; classtype:attempted-recon; sid:200008724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.gyyiwk.id",nocase; classtype:attempted-recon; sid:200008725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.hbzhrq.id",nocase; classtype:attempted-recon; sid:200008726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.hilrzx.id",nocase; classtype:attempted-recon; sid:200008727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.hloymq.id",nocase; classtype:attempted-recon; sid:200008728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.hqnjab.id",nocase; classtype:attempted-recon; sid:200008729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.iclxtv.id",nocase; classtype:attempted-recon; sid:200008730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.iikuie.id",nocase; classtype:attempted-recon; sid:200008731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.jlxkma.id",nocase; classtype:attempted-recon; sid:200008732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.jqlcwt.id",nocase; classtype:attempted-recon; sid:200008733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.jvahcx.id",nocase; classtype:attempted-recon; sid:200008734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.jzuxde.id",nocase; classtype:attempted-recon; sid:200008735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.khlzjd.id",nocase; classtype:attempted-recon; sid:200008736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.krxqdo.id",nocase; classtype:attempted-recon; sid:200008737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.ksbgin.id",nocase; classtype:attempted-recon; sid:200008738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.lndzay.id",nocase; classtype:attempted-recon; sid:200008739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.lxxdeq.id",nocase; classtype:attempted-recon; sid:200008740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.lyiqnd.id",nocase; classtype:attempted-recon; sid:200008741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.lyxyuf.id",nocase; classtype:attempted-recon; sid:200008742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.mbjhhd.id",nocase; classtype:attempted-recon; sid:200008743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.mhlvfi.id",nocase; classtype:attempted-recon; sid:200008744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.mifikv.id",nocase; classtype:attempted-recon; sid:200008745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.mqvjkr.id",nocase; classtype:attempted-recon; sid:200008746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.mrinog.id",nocase; classtype:attempted-recon; sid:200008747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.nbzllz.id",nocase; classtype:attempted-recon; sid:200008748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.nsyflm.id",nocase; classtype:attempted-recon; sid:200008749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.ntdght.id",nocase; classtype:attempted-recon; sid:200008750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.ovpzzh.id",nocase; classtype:attempted-recon; sid:200008751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.pdzcxc.id",nocase; classtype:attempted-recon; sid:200008752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.podujg.id",nocase; classtype:attempted-recon; sid:200008753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.pvqbdr.id",nocase; classtype:attempted-recon; sid:200008754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.qigfcj.id",nocase; classtype:attempted-recon; sid:200008755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.rdinpk.id",nocase; classtype:attempted-recon; sid:200008756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.rqrpjt.id",nocase; classtype:attempted-recon; sid:200008757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.rzyssw.id",nocase; classtype:attempted-recon; sid:200008758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.sfqlok.id",nocase; classtype:attempted-recon; sid:200008759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.ukpvop.id",nocase; classtype:attempted-recon; sid:200008760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.upblku.id",nocase; classtype:attempted-recon; sid:200008761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.uuppfm.id",nocase; classtype:attempted-recon; sid:200008762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.wfzola.id",nocase; classtype:attempted-recon; sid:200008763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.wgkngu.id",nocase; classtype:attempted-recon; sid:200008764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.whdeeh.id",nocase; classtype:attempted-recon; sid:200008765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.xkpjpw.id",nocase; classtype:attempted-recon; sid:200008766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.xqjgyc.id",nocase; classtype:attempted-recon; sid:200008767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.xutdbc.id",nocase; classtype:attempted-recon; sid:200008768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.yabztv.id",nocase; classtype:attempted-recon; sid:200008769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.yvzlne.id",nocase; classtype:attempted-recon; sid:200008770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.zcyttz.id",nocase; classtype:attempted-recon; sid:200008771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.zdknwh.id",nocase; classtype:attempted-recon; sid:200008772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.ziehxi.id",nocase; classtype:attempted-recon; sid:200008773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.zkxahi.id",nocase; classtype:attempted-recon; sid:200008774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.zmjezy.id",nocase; classtype:attempted-recon; sid:200008775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.zuaswx.id",nocase; classtype:attempted-recon; sid:200008776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.accunn.id",nocase; classtype:attempted-recon; sid:200008777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.arowal.id",nocase; classtype:attempted-recon; sid:200008778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.asciqo.id",nocase; classtype:attempted-recon; sid:200008779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.bomgwz.id",nocase; classtype:attempted-recon; sid:200008780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.bypiqw.id",nocase; classtype:attempted-recon; sid:200008781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.ciuwoo.id",nocase; classtype:attempted-recon; sid:200008782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.cmoqdm.id",nocase; classtype:attempted-recon; sid:200008783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.cufjaj.id",nocase; classtype:attempted-recon; sid:200008784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.czaoxt.id",nocase; classtype:attempted-recon; sid:200008785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.eaezlo.id",nocase; classtype:attempted-recon; sid:200008786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.egrhtq.id",nocase; classtype:attempted-recon; sid:200008787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.eickib.id",nocase; classtype:attempted-recon; sid:200008788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.epcyai.id",nocase; classtype:attempted-recon; sid:200008789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.fdtieg.id",nocase; classtype:attempted-recon; sid:200008790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.fjfuni.id",nocase; classtype:attempted-recon; sid:200008791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.fkbwav.id",nocase; classtype:attempted-recon; sid:200008792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.gbaluw.id",nocase; classtype:attempted-recon; sid:200008793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.gkaxhu.id",nocase; classtype:attempted-recon; sid:200008794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.gpaqia.id",nocase; classtype:attempted-recon; sid:200008795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.gykmlg.id",nocase; classtype:attempted-recon; sid:200008796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.gyyiwk.id",nocase; classtype:attempted-recon; sid:200008797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.hbzhrq.id",nocase; classtype:attempted-recon; sid:200008798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.hilrzx.id",nocase; classtype:attempted-recon; sid:200008799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.hloymq.id",nocase; classtype:attempted-recon; sid:200008800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.hqnjab.id",nocase; classtype:attempted-recon; sid:200008801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.iclxtv.id",nocase; classtype:attempted-recon; sid:200008802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.iikuie.id",nocase; classtype:attempted-recon; sid:200008803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.jlxkma.id",nocase; classtype:attempted-recon; sid:200008804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.jqlcwt.id",nocase; classtype:attempted-recon; sid:200008805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.jvahcx.id",nocase; classtype:attempted-recon; sid:200008806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.jzuxde.id",nocase; classtype:attempted-recon; sid:200008807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.khlzjd.id",nocase; classtype:attempted-recon; sid:200008808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.krxqdo.id",nocase; classtype:attempted-recon; sid:200008809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.ksbgin.id",nocase; classtype:attempted-recon; sid:200008810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.lndzay.id",nocase; classtype:attempted-recon; sid:200008811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.lxxdeq.id",nocase; classtype:attempted-recon; sid:200008812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.lyiqnd.id",nocase; classtype:attempted-recon; sid:200008813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.lyxyuf.id",nocase; classtype:attempted-recon; sid:200008814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.mbjhhd.id",nocase; classtype:attempted-recon; sid:200008815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.mhlvfi.id",nocase; classtype:attempted-recon; sid:200008816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.mifikv.id",nocase; classtype:attempted-recon; sid:200008817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.mqvjkr.id",nocase; classtype:attempted-recon; sid:200008818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.mrinog.id",nocase; classtype:attempted-recon; sid:200008819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.nbzllz.id",nocase; classtype:attempted-recon; sid:200008820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.nsyflm.id",nocase; classtype:attempted-recon; sid:200008821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.ntdght.id",nocase; classtype:attempted-recon; sid:200008822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.ovpzzh.id",nocase; classtype:attempted-recon; sid:200008823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.pdzcxc.id",nocase; classtype:attempted-recon; sid:200008824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.podujg.id",nocase; classtype:attempted-recon; sid:200008825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.pvqbdr.id",nocase; classtype:attempted-recon; sid:200008826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.qigfcj.id",nocase; classtype:attempted-recon; sid:200008827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.rdinpk.id",nocase; classtype:attempted-recon; sid:200008828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.rqrpjt.id",nocase; classtype:attempted-recon; sid:200008829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.rzyssw.id",nocase; classtype:attempted-recon; sid:200008830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.sfqlok.id",nocase; classtype:attempted-recon; sid:200008831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.ukpvop.id",nocase; classtype:attempted-recon; sid:200008832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.upblku.id",nocase; classtype:attempted-recon; sid:200008833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.uuppfm.id",nocase; classtype:attempted-recon; sid:200008834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.wfzola.id",nocase; classtype:attempted-recon; sid:200008835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.wgkngu.id",nocase; classtype:attempted-recon; sid:200008836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.whdeeh.id",nocase; classtype:attempted-recon; sid:200008837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.xkpjpw.id",nocase; classtype:attempted-recon; sid:200008838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.xqjgyc.id",nocase; classtype:attempted-recon; sid:200008839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.xutdbc.id",nocase; classtype:attempted-recon; sid:200008840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.yabztv.id",nocase; classtype:attempted-recon; sid:200008841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.yvzlne.id",nocase; classtype:attempted-recon; sid:200008842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.zcyttz.id",nocase; classtype:attempted-recon; sid:200008843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.zdknwh.id",nocase; classtype:attempted-recon; sid:200008844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.ziehxi.id",nocase; classtype:attempted-recon; sid:200008845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.zkxahi.id",nocase; classtype:attempted-recon; sid:200008846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.zmjezy.id",nocase; classtype:attempted-recon; sid:200008847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.zuaswx.id",nocase; classtype:attempted-recon; sid:200008848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.accunn.id",nocase; classtype:attempted-recon; sid:200008849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.arowal.id",nocase; classtype:attempted-recon; sid:200008850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.asciqo.id",nocase; classtype:attempted-recon; sid:200008851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.bomgwz.id",nocase; classtype:attempted-recon; sid:200008852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.bypiqw.id",nocase; classtype:attempted-recon; sid:200008853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.ciuwoo.id",nocase; classtype:attempted-recon; sid:200008854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.cmoqdm.id",nocase; classtype:attempted-recon; sid:200008855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.cufjaj.id",nocase; classtype:attempted-recon; sid:200008856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.czaoxt.id",nocase; classtype:attempted-recon; sid:200008857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.eaezlo.id",nocase; classtype:attempted-recon; sid:200008858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.egrhtq.id",nocase; classtype:attempted-recon; sid:200008859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.eickib.id",nocase; classtype:attempted-recon; sid:200008860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.epcyai.id",nocase; classtype:attempted-recon; sid:200008861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.fdtieg.id",nocase; classtype:attempted-recon; sid:200008862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.fjfuni.id",nocase; classtype:attempted-recon; sid:200008863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.fkbwav.id",nocase; classtype:attempted-recon; sid:200008864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.gbaluw.id",nocase; classtype:attempted-recon; sid:200008865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.gkaxhu.id",nocase; classtype:attempted-recon; sid:200008866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.gpaqia.id",nocase; classtype:attempted-recon; sid:200008867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.gykmlg.id",nocase; classtype:attempted-recon; sid:200008868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.gyyiwk.id",nocase; classtype:attempted-recon; sid:200008869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.hbzhrq.id",nocase; classtype:attempted-recon; sid:200008870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.hilrzx.id",nocase; classtype:attempted-recon; sid:200008871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.hloymq.id",nocase; classtype:attempted-recon; sid:200008872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.hqnjab.id",nocase; classtype:attempted-recon; sid:200008873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.iclxtv.id",nocase; classtype:attempted-recon; sid:200008874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.iikuie.id",nocase; classtype:attempted-recon; sid:200008875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.jlxkma.id",nocase; classtype:attempted-recon; sid:200008876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.jqlcwt.id",nocase; classtype:attempted-recon; sid:200008877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.jvahcx.id",nocase; classtype:attempted-recon; sid:200008878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.jzuxde.id",nocase; classtype:attempted-recon; sid:200008879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.khlzjd.id",nocase; classtype:attempted-recon; sid:200008880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.krxqdo.id",nocase; classtype:attempted-recon; sid:200008881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.ksbgin.id",nocase; classtype:attempted-recon; sid:200008882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.lndzay.id",nocase; classtype:attempted-recon; sid:200008883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.lxxdeq.id",nocase; classtype:attempted-recon; sid:200008884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.lyiqnd.id",nocase; classtype:attempted-recon; sid:200008885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.lyxyuf.id",nocase; classtype:attempted-recon; sid:200008886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.mbjhhd.id",nocase; classtype:attempted-recon; sid:200008887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.mhlvfi.id",nocase; classtype:attempted-recon; sid:200008888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.mifikv.id",nocase; classtype:attempted-recon; sid:200008889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.mqvjkr.id",nocase; classtype:attempted-recon; sid:200008890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.mrinog.id",nocase; classtype:attempted-recon; sid:200008891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.nbzllz.id",nocase; classtype:attempted-recon; sid:200008892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.nsyflm.id",nocase; classtype:attempted-recon; sid:200008893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.ntdght.id",nocase; classtype:attempted-recon; sid:200008894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.ovpzzh.id",nocase; classtype:attempted-recon; sid:200008895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.pdzcxc.id",nocase; classtype:attempted-recon; sid:200008896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.podujg.id",nocase; classtype:attempted-recon; sid:200008897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.pvqbdr.id",nocase; classtype:attempted-recon; sid:200008898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.qigfcj.id",nocase; classtype:attempted-recon; sid:200008899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.rdinpk.id",nocase; classtype:attempted-recon; sid:200008900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.rqrpjt.id",nocase; classtype:attempted-recon; sid:200008901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.rzyssw.id",nocase; classtype:attempted-recon; sid:200008902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.sfqlok.id",nocase; classtype:attempted-recon; sid:200008903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.ukpvop.id",nocase; classtype:attempted-recon; sid:200008904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.upblku.id",nocase; classtype:attempted-recon; sid:200008905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.uuppfm.id",nocase; classtype:attempted-recon; sid:200008906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.wfzola.id",nocase; classtype:attempted-recon; sid:200008907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.wgkngu.id",nocase; classtype:attempted-recon; sid:200008908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.whdeeh.id",nocase; classtype:attempted-recon; sid:200008909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.xkpjpw.id",nocase; classtype:attempted-recon; sid:200008910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.xqjgyc.id",nocase; classtype:attempted-recon; sid:200008911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.xutdbc.id",nocase; classtype:attempted-recon; sid:200008912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.yabztv.id",nocase; classtype:attempted-recon; sid:200008913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.yvzlne.id",nocase; classtype:attempted-recon; sid:200008914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.zcyttz.id",nocase; classtype:attempted-recon; sid:200008915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.zdknwh.id",nocase; classtype:attempted-recon; sid:200008916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.ziehxi.id",nocase; classtype:attempted-recon; sid:200008917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.zkxahi.id",nocase; classtype:attempted-recon; sid:200008918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.zmjezy.id",nocase; classtype:attempted-recon; sid:200008919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.zuaswx.id",nocase; classtype:attempted-recon; sid:200008920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vibramwyprzedaz.com",nocase; classtype:attempted-recon; sid:200008921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.acysue.za.com",nocase; classtype:attempted-recon; sid:200008922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200008923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200008924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200008925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200008926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.airnja.za.com",nocase; classtype:attempted-recon; sid:200008927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200008928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200008929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200008930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200008931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200008932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200008933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.bangme.za.com",nocase; classtype:attempted-recon; sid:200008934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200008935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.befurr.za.com",nocase; classtype:attempted-recon; sid:200008936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200008937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200008938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200008939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200008940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200008941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200008942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200008943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200008944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200008945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200008946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200008947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200008948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200008949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200008950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200008951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200008952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200008953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200008954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200008955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200008956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200008957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200008958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200008959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200008960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200008961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200008962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200008963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200008964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200008965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200008966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200008967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200008968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200008969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200008970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200008971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200008972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200008973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200008974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200008975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.enksln.za.com",nocase; classtype:attempted-recon; sid:200008976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200008977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200008978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.equmej.za.com",nocase; classtype:attempted-recon; sid:200008979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200008980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200008981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200008982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200008983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200008984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200008985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200008986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200008987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200008988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200008989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.frroav.za.com",nocase; classtype:attempted-recon; sid:200008990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200008991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200008992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200008993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200008994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200008995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200008996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200008997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200008998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200008999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200009000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200009001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200009002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200009003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200009004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200009005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200009006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200009007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200009008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200009009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200009010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200009011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200009012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200009013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200009014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200009015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200009016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200009017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200009018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200009019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200009020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200009021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200009022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200009023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200009024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200009025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200009026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200009027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200009028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200009029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200009030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200009031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200009032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200009033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200009034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200009035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200009036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200009037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200009038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200009039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200009040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200009041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200009042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200009043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200009044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200009045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200009046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200009047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200009048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200009049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200009050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200009051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.laguer.za.com",nocase; classtype:attempted-recon; sid:200009052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200009053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200009054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200009055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200009056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200009057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200009058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200009059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200009060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.maivih.za.com",nocase; classtype:attempted-recon; sid:200009061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200009062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200009063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200009064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200009065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200009066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200009067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200009068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200009069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200009070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200009071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200009072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200009073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200009074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200009075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200009076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200009077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200009078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200009079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200009080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200009081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200009082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200009083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200009084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200009085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200009086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200009087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200009088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200009089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200009090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200009091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200009092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200009093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200009094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200009095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.oynnaf.za.com",nocase; classtype:attempted-recon; sid:200009096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ozgdvq.za.com",nocase; classtype:attempted-recon; sid:200009097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200009098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.pemrjn.za.com",nocase; classtype:attempted-recon; sid:200009099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.phkhrx.za.com",nocase; classtype:attempted-recon; sid:200009100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ppwmzt.za.com",nocase; classtype:attempted-recon; sid:200009101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.puzdqh.za.com",nocase; classtype:attempted-recon; sid:200009102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.pvrmnc.za.com",nocase; classtype:attempted-recon; sid:200009103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.qdwepk.za.com",nocase; classtype:attempted-recon; sid:200009104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.qfbzop.za.com",nocase; classtype:attempted-recon; sid:200009105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.qgispn.za.com",nocase; classtype:attempted-recon; sid:200009106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.qphuso.za.com",nocase; classtype:attempted-recon; sid:200009107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.qwnduy.za.com",nocase; classtype:attempted-recon; sid:200009108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200009109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.reaqos.za.com",nocase; classtype:attempted-recon; sid:200009110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.rfqqga.za.com",nocase; classtype:attempted-recon; sid:200009111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.rhbvvz.za.com",nocase; classtype:attempted-recon; sid:200009112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200009113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200009114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.rmzoht.za.com",nocase; classtype:attempted-recon; sid:200009115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.roftae.za.com",nocase; classtype:attempted-recon; sid:200009116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.rplout.za.com",nocase; classtype:attempted-recon; sid:200009117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ryqtlk.za.com",nocase; classtype:attempted-recon; sid:200009118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.rzkyqg.za.com",nocase; classtype:attempted-recon; sid:200009119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.scqqle.za.com",nocase; classtype:attempted-recon; sid:200009120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.sjolxi.za.com",nocase; classtype:attempted-recon; sid:200009121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.snmrey.za.com",nocase; classtype:attempted-recon; sid:200009122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.srlqyc.za.com",nocase; classtype:attempted-recon; sid:200009123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.sztsok.za.com",nocase; classtype:attempted-recon; sid:200009124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.tcpzfk.za.com",nocase; classtype:attempted-recon; sid:200009125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200009126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.tfwvbz.za.com",nocase; classtype:attempted-recon; sid:200009127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.tipmxj.za.com",nocase; classtype:attempted-recon; sid:200009128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.tubvou.za.com",nocase; classtype:attempted-recon; sid:200009129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.twozdd.za.com",nocase; classtype:attempted-recon; sid:200009130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ufrjqp.za.com",nocase; classtype:attempted-recon; sid:200009131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ugbucg.za.com",nocase; classtype:attempted-recon; sid:200009132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.uiiavd.za.com",nocase; classtype:attempted-recon; sid:200009133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ujngcg.za.com",nocase; classtype:attempted-recon; sid:200009134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.urcrba.za.com",nocase; classtype:attempted-recon; sid:200009135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.utaekx.za.com",nocase; classtype:attempted-recon; sid:200009136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.uumird.za.com",nocase; classtype:attempted-recon; sid:200009137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.uyyfoa.za.com",nocase; classtype:attempted-recon; sid:200009138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.vjwefx.za.com",nocase; classtype:attempted-recon; sid:200009139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.vwprmh.za.com",nocase; classtype:attempted-recon; sid:200009140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.wbuilk.za.com",nocase; classtype:attempted-recon; sid:200009141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.wdmxau.za.com",nocase; classtype:attempted-recon; sid:200009142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.whbfgy.za.com",nocase; classtype:attempted-recon; sid:200009143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.woddlo.za.com",nocase; classtype:attempted-recon; sid:200009144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.wposkr.za.com",nocase; classtype:attempted-recon; sid:200009145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.wpzqcb.za.com",nocase; classtype:attempted-recon; sid:200009146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.wvdxil.za.com",nocase; classtype:attempted-recon; sid:200009147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.wzqpee.za.com",nocase; classtype:attempted-recon; sid:200009148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.wzrrqp.za.com",nocase; classtype:attempted-recon; sid:200009149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.xbdhbi.za.com",nocase; classtype:attempted-recon; sid:200009150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.xfwrde.za.com",nocase; classtype:attempted-recon; sid:200009151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.xpyewd.za.com",nocase; classtype:attempted-recon; sid:200009152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ybqjcs.za.com",nocase; classtype:attempted-recon; sid:200009153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ygekte.za.com",nocase; classtype:attempted-recon; sid:200009154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.ymewff.za.com",nocase; classtype:attempted-recon; sid:200009155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.yqszfl.za.com",nocase; classtype:attempted-recon; sid:200009156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.yvgrja.za.com",nocase; classtype:attempted-recon; sid:200009157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.yxzuhh.za.com",nocase; classtype:attempted-recon; sid:200009158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.zckoua.za.com",nocase; classtype:attempted-recon; sid:200009159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.zcmgqp.za.com",nocase; classtype:attempted-recon; sid:200009160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.zgjlxb.za.com",nocase; classtype:attempted-recon; sid:200009161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.zlzusf.za.com",nocase; classtype:attempted-recon; sid:200009162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.zrsgyv.za.com",nocase; classtype:attempted-recon; sid:200009163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.zznany.za.com",nocase; classtype:attempted-recon; sid:200009164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicavisacnnurueszovvseon.escazsmevoiursi.zzwuas.za.com",nocase; classtype:attempted-recon; sid:200009165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicblock.co.ke",nocase; classtype:attempted-recon; sid:200009166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicjguqlxm.duckdns.org",nocase; classtype:attempted-recon; sid:200009167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"victorarath99.github.io",nocase; classtype:attempted-recon; sid:200009168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.acysue.za.com",nocase; classtype:attempted-recon; sid:200009169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200009170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200009171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200009172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200009173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.airnja.za.com",nocase; classtype:attempted-recon; sid:200009174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200009175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200009176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200009177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200009178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200009179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200009180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.bangme.za.com",nocase; classtype:attempted-recon; sid:200009181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200009182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.befurr.za.com",nocase; classtype:attempted-recon; sid:200009183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200009184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200009185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200009186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200009187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200009188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200009189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200009190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200009191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200009192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200009193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200009194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200009195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200009196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200009197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200009198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200009199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200009200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200009201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200009202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200009203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200009204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200009205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200009206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200009207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200009208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200009209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200009210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200009211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200009212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200009213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200009214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200009215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200009216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200009217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200009218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200009219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200009220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200009221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200009222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.enksln.za.com",nocase; classtype:attempted-recon; sid:200009223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200009224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200009225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.equmej.za.com",nocase; classtype:attempted-recon; sid:200009226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200009227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200009228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200009229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200009230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200009231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200009232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200009233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200009234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200009235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200009236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.frroav.za.com",nocase; classtype:attempted-recon; sid:200009237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200009238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200009239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200009240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200009241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200009242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200009243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200009244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200009245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200009246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200009247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200009248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200009249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200009250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200009251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200009252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200009253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200009254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200009255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200009256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200009257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200009258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200009259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200009260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200009261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200009262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200009263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200009264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200009265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200009266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200009267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200009268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200009269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200009270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200009271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200009272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200009273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200009274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200009275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200009276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200009277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200009278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200009279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200009280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200009281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200009282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200009283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200009284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200009285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200009286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200009287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200009288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200009289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200009290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200009291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200009292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200009293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200009294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200009295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200009296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200009297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200009298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.laguer.za.com",nocase; classtype:attempted-recon; sid:200009299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200009300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200009301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200009302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200009303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200009304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200009305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200009306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200009307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200009308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200009309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200009310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.maivih.za.com",nocase; classtype:attempted-recon; sid:200009311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200009312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200009313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200009314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200009315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200009316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200009317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200009318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200009319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200009320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200009321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200009322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200009323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200009324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200009325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200009326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200009327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200009328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200009329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200009330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200009331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200009332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200009333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200009334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200009335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200009336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200009337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200009338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200009339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200009340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200009341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200009342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200009343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200009344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200009345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200009346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.pivwti.za.com",nocase; classtype:attempted-recon; sid:200009347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.pkdobq.za.com",nocase; classtype:attempted-recon; sid:200009348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.poigwz.za.com",nocase; classtype:attempted-recon; sid:200009349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.puzdqh.za.com",nocase; classtype:attempted-recon; sid:200009350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.pxqicu.za.com",nocase; classtype:attempted-recon; sid:200009351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.qcpjmm.za.com",nocase; classtype:attempted-recon; sid:200009352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.qdwepk.za.com",nocase; classtype:attempted-recon; sid:200009353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.qfdotp.za.com",nocase; classtype:attempted-recon; sid:200009354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.qfrbez.za.com",nocase; classtype:attempted-recon; sid:200009355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.qgispn.za.com",nocase; classtype:attempted-recon; sid:200009356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.qphuso.za.com",nocase; classtype:attempted-recon; sid:200009357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.qvfwma.za.com",nocase; classtype:attempted-recon; sid:200009358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.qwnduy.za.com",nocase; classtype:attempted-recon; sid:200009359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200009360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.rclyhu.za.com",nocase; classtype:attempted-recon; sid:200009361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.reaqos.za.com",nocase; classtype:attempted-recon; sid:200009362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.rfqqga.za.com",nocase; classtype:attempted-recon; sid:200009363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.rhfwsh.za.com",nocase; classtype:attempted-recon; sid:200009364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200009365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200009366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.rmpemt.za.com",nocase; classtype:attempted-recon; sid:200009367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.rmzoht.za.com",nocase; classtype:attempted-recon; sid:200009368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.roftae.za.com",nocase; classtype:attempted-recon; sid:200009369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.rooreg.za.com",nocase; classtype:attempted-recon; sid:200009370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.rpfjaz.za.com",nocase; classtype:attempted-recon; sid:200009371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.rsnklt.za.com",nocase; classtype:attempted-recon; sid:200009372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.rujjog.za.com",nocase; classtype:attempted-recon; sid:200009373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ryqtlk.za.com",nocase; classtype:attempted-recon; sid:200009374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.sjolxi.za.com",nocase; classtype:attempted-recon; sid:200009375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.sqmnsg.za.com",nocase; classtype:attempted-recon; sid:200009376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.sztsok.za.com",nocase; classtype:attempted-recon; sid:200009377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200009378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.tfpdde.za.com",nocase; classtype:attempted-recon; sid:200009379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.tipmxj.za.com",nocase; classtype:attempted-recon; sid:200009380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.tlvtct.za.com",nocase; classtype:attempted-recon; sid:200009381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.tlxfsd.za.com",nocase; classtype:attempted-recon; sid:200009382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.twozdd.za.com",nocase; classtype:attempted-recon; sid:200009383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.tztcbk.za.com",nocase; classtype:attempted-recon; sid:200009384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ufrjqp.za.com",nocase; classtype:attempted-recon; sid:200009385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.uhtsna.za.com",nocase; classtype:attempted-recon; sid:200009386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.uhuhey.za.com",nocase; classtype:attempted-recon; sid:200009387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.uiiavd.za.com",nocase; classtype:attempted-recon; sid:200009388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.uopoem.za.com",nocase; classtype:attempted-recon; sid:200009389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.uumird.za.com",nocase; classtype:attempted-recon; sid:200009390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.uvowom.za.com",nocase; classtype:attempted-recon; sid:200009391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.vbwfva.za.com",nocase; classtype:attempted-recon; sid:200009392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.vdobfv.za.com",nocase; classtype:attempted-recon; sid:200009393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.vjwefx.za.com",nocase; classtype:attempted-recon; sid:200009394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.vstcza.za.com",nocase; classtype:attempted-recon; sid:200009395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.vvapfd.za.com",nocase; classtype:attempted-recon; sid:200009396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.wdmxau.za.com",nocase; classtype:attempted-recon; sid:200009397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.woddlo.za.com",nocase; classtype:attempted-recon; sid:200009398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.wposkr.za.com",nocase; classtype:attempted-recon; sid:200009399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.wpzqcb.za.com",nocase; classtype:attempted-recon; sid:200009400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.wvdxil.za.com",nocase; classtype:attempted-recon; sid:200009401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.wzqpee.za.com",nocase; classtype:attempted-recon; sid:200009402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.wzrrqp.za.com",nocase; classtype:attempted-recon; sid:200009403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.xbdhbi.za.com",nocase; classtype:attempted-recon; sid:200009404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.xfwrde.za.com",nocase; classtype:attempted-recon; sid:200009405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.xokvig.za.com",nocase; classtype:attempted-recon; sid:200009406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.xpyewd.za.com",nocase; classtype:attempted-recon; sid:200009407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ybqjcs.za.com",nocase; classtype:attempted-recon; sid:200009408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ygekte.za.com",nocase; classtype:attempted-recon; sid:200009409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.yilvza.za.com",nocase; classtype:attempted-recon; sid:200009410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.ymewff.za.com",nocase; classtype:attempted-recon; sid:200009411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.yptwya.za.com",nocase; classtype:attempted-recon; sid:200009412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.yqszfl.za.com",nocase; classtype:attempted-recon; sid:200009413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.yxzuhh.za.com",nocase; classtype:attempted-recon; sid:200009414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.yytmgo.za.com",nocase; classtype:attempted-recon; sid:200009415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.zcmgqp.za.com",nocase; classtype:attempted-recon; sid:200009416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.zgjlxb.za.com",nocase; classtype:attempted-recon; sid:200009417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.zrsgyv.za.com",nocase; classtype:attempted-recon; sid:200009418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.zsmfjr.za.com",nocase; classtype:attempted-recon; sid:200009419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.zznany.za.com",nocase; classtype:attempted-recon; sid:200009420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicucavisnoaaueovseon.visazciesnureeinsi.zzwuas.za.com",nocase; classtype:attempted-recon; sid:200009421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.akfmmu.za.com",nocase; classtype:attempted-recon; sid:200009422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.balvnd.za.com",nocase; classtype:attempted-recon; sid:200009423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.bbzbtx.za.com",nocase; classtype:attempted-recon; sid:200009424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.blrvdr.za.com",nocase; classtype:attempted-recon; sid:200009425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.blxztu.za.com",nocase; classtype:attempted-recon; sid:200009426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.bvjqmk.za.com",nocase; classtype:attempted-recon; sid:200009427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.cbwqrw.za.com",nocase; classtype:attempted-recon; sid:200009428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.cqqpsz.za.com",nocase; classtype:attempted-recon; sid:200009429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.cxwohm.za.com",nocase; classtype:attempted-recon; sid:200009430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.dvqcit.za.com",nocase; classtype:attempted-recon; sid:200009431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.emiduh.za.com",nocase; classtype:attempted-recon; sid:200009432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.fonuba.za.com",nocase; classtype:attempted-recon; sid:200009433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.gedvrb.za.com",nocase; classtype:attempted-recon; sid:200009434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.gzauog.za.com",nocase; classtype:attempted-recon; sid:200009435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.hchaca.za.com",nocase; classtype:attempted-recon; sid:200009436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.hxxrxy.za.com",nocase; classtype:attempted-recon; sid:200009437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.ipqbiq.za.com",nocase; classtype:attempted-recon; sid:200009438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.jdtkva.za.com",nocase; classtype:attempted-recon; sid:200009439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.jgdgat.za.com",nocase; classtype:attempted-recon; sid:200009440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.jwnhul.za.com",nocase; classtype:attempted-recon; sid:200009441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.lquolu.za.com",nocase; classtype:attempted-recon; sid:200009442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.lvbccr.za.com",nocase; classtype:attempted-recon; sid:200009443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.lvpxrb.za.com",nocase; classtype:attempted-recon; sid:200009444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.nxdsar.za.com",nocase; classtype:attempted-recon; sid:200009445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.obeyjn.za.com",nocase; classtype:attempted-recon; sid:200009446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.oeayuk.za.com",nocase; classtype:attempted-recon; sid:200009447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.olycnz.za.com",nocase; classtype:attempted-recon; sid:200009448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.pgqcnr.za.com",nocase; classtype:attempted-recon; sid:200009449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.qipwcl.za.com",nocase; classtype:attempted-recon; sid:200009450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.qsfxkv.za.com",nocase; classtype:attempted-recon; sid:200009451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.qzuuho.za.com",nocase; classtype:attempted-recon; sid:200009452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.rqumqp.za.com",nocase; classtype:attempted-recon; sid:200009453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.rtwmgc.za.com",nocase; classtype:attempted-recon; sid:200009454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.sochye.za.com",nocase; classtype:attempted-recon; sid:200009455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.spsvre.za.com",nocase; classtype:attempted-recon; sid:200009456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.szynbx.za.com",nocase; classtype:attempted-recon; sid:200009457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.tbtenr.za.com",nocase; classtype:attempted-recon; sid:200009458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.tzzwdq.za.com",nocase; classtype:attempted-recon; sid:200009459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.vndscu.za.com",nocase; classtype:attempted-recon; sid:200009460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.wmbipa.za.com",nocase; classtype:attempted-recon; sid:200009461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.wyothk.za.com",nocase; classtype:attempted-recon; sid:200009462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccaovvseon.visazcmieeeainsi.xqjofw.za.com",nocase; classtype:attempted-recon; sid:200009463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.acysue.za.com",nocase; classtype:attempted-recon; sid:200009464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200009465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200009466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200009467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200009468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.airnja.za.com",nocase; classtype:attempted-recon; sid:200009469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200009470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200009471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200009472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200009473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200009474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200009475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.bangme.za.com",nocase; classtype:attempted-recon; sid:200009476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200009477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.befurr.za.com",nocase; classtype:attempted-recon; sid:200009478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200009479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200009480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200009481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200009482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200009483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200009484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200009485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200009486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200009487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200009488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200009489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200009490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200009491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200009492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200009493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200009494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200009495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200009496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200009497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200009498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200009499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200009500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200009501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200009502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200009503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200009504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200009505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200009506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200009507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200009508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200009509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200009510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200009511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200009512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200009513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200009514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200009515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200009516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200009517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.enksln.za.com",nocase; classtype:attempted-recon; sid:200009518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200009519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200009520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.equmej.za.com",nocase; classtype:attempted-recon; sid:200009521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200009522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200009523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200009524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200009525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200009526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200009527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200009528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200009529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200009530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200009531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.frroav.za.com",nocase; classtype:attempted-recon; sid:200009532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200009533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200009534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200009535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200009536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200009537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200009538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200009539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200009540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200009541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200009542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200009543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200009544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200009545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200009546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200009547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200009548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200009549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200009550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200009551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200009552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200009553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200009554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200009555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200009556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200009557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200009558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200009559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200009560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200009561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200009562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200009563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200009564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200009565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200009566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200009567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200009568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200009569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200009570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200009571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200009572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200009573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200009574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200009575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200009576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200009577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200009578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200009579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200009580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200009581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200009582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200009583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200009584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200009585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200009586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200009587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200009588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200009589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200009590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200009591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200009592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200009593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.laguer.za.com",nocase; classtype:attempted-recon; sid:200009594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200009595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200009596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200009597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200009598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200009599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200009600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200009601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200009602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200009603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200009604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200009605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.maivih.za.com",nocase; classtype:attempted-recon; sid:200009606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200009607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200009608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200009609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200009610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200009611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200009612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200009613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200009614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200009615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200009616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200009617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200009618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200009619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200009620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200009621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200009622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200009623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200009624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200009625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200009626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200009627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200009628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200009629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200009630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200009631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200009632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200009633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200009634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200009635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200009636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200009637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200009638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200009639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200009640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.oynnaf.za.com",nocase; classtype:attempted-recon; sid:200009641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ozgdvq.za.com",nocase; classtype:attempted-recon; sid:200009642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.paivji.za.com",nocase; classtype:attempted-recon; sid:200009643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200009644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.pemrjn.za.com",nocase; classtype:attempted-recon; sid:200009645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.pkdobq.za.com",nocase; classtype:attempted-recon; sid:200009646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.pksqpw.za.com",nocase; classtype:attempted-recon; sid:200009647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.puzdqh.za.com",nocase; classtype:attempted-recon; sid:200009648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.pxqicu.za.com",nocase; classtype:attempted-recon; sid:200009649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.qcpjmm.za.com",nocase; classtype:attempted-recon; sid:200009650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.qfbzop.za.com",nocase; classtype:attempted-recon; sid:200009651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.qfdotp.za.com",nocase; classtype:attempted-recon; sid:200009652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.qfrbez.za.com",nocase; classtype:attempted-recon; sid:200009653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.qgispn.za.com",nocase; classtype:attempted-recon; sid:200009654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200009655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.reaqos.za.com",nocase; classtype:attempted-recon; sid:200009656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.rfqqga.za.com",nocase; classtype:attempted-recon; sid:200009657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.rhbvvz.za.com",nocase; classtype:attempted-recon; sid:200009658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.rhfwsh.za.com",nocase; classtype:attempted-recon; sid:200009659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200009660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200009661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.rmzoht.za.com",nocase; classtype:attempted-recon; sid:200009662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.roftae.za.com",nocase; classtype:attempted-recon; sid:200009663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.rooreg.za.com",nocase; classtype:attempted-recon; sid:200009664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.rrajfi.za.com",nocase; classtype:attempted-recon; sid:200009665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.rsnklt.za.com",nocase; classtype:attempted-recon; sid:200009666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.rsuwkc.za.com",nocase; classtype:attempted-recon; sid:200009667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.rujjog.za.com",nocase; classtype:attempted-recon; sid:200009668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.scqqle.za.com",nocase; classtype:attempted-recon; sid:200009669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.sjolxi.za.com",nocase; classtype:attempted-recon; sid:200009670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.snmrey.za.com",nocase; classtype:attempted-recon; sid:200009671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.srlqyc.za.com",nocase; classtype:attempted-recon; sid:200009672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.sztsok.za.com",nocase; classtype:attempted-recon; sid:200009673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.tayped.za.com",nocase; classtype:attempted-recon; sid:200009674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.tcpzfk.za.com",nocase; classtype:attempted-recon; sid:200009675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200009676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.tfpdde.za.com",nocase; classtype:attempted-recon; sid:200009677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.tfwvbz.za.com",nocase; classtype:attempted-recon; sid:200009678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.tipmxj.za.com",nocase; classtype:attempted-recon; sid:200009679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.tlvtct.za.com",nocase; classtype:attempted-recon; sid:200009680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.tmybve.za.com",nocase; classtype:attempted-recon; sid:200009681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.tubvou.za.com",nocase; classtype:attempted-recon; sid:200009682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.twbvyf.za.com",nocase; classtype:attempted-recon; sid:200009683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.twozdd.za.com",nocase; classtype:attempted-recon; sid:200009684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.tztcbk.za.com",nocase; classtype:attempted-recon; sid:200009685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ufrjqp.za.com",nocase; classtype:attempted-recon; sid:200009686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ugbucg.za.com",nocase; classtype:attempted-recon; sid:200009687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.uhuhey.za.com",nocase; classtype:attempted-recon; sid:200009688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.uiiavd.za.com",nocase; classtype:attempted-recon; sid:200009689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ujngcg.za.com",nocase; classtype:attempted-recon; sid:200009690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.umfbax.za.com",nocase; classtype:attempted-recon; sid:200009691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.uopoem.za.com",nocase; classtype:attempted-recon; sid:200009692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.urcrba.za.com",nocase; classtype:attempted-recon; sid:200009693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.urycmw.za.com",nocase; classtype:attempted-recon; sid:200009694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.uvowom.za.com",nocase; classtype:attempted-recon; sid:200009695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.vbwfva.za.com",nocase; classtype:attempted-recon; sid:200009696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.vdobfv.za.com",nocase; classtype:attempted-recon; sid:200009697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.virtxq.za.com",nocase; classtype:attempted-recon; sid:200009698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.vjwefx.za.com",nocase; classtype:attempted-recon; sid:200009699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.vstcza.za.com",nocase; classtype:attempted-recon; sid:200009700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.vvapfd.za.com",nocase; classtype:attempted-recon; sid:200009701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.vwprmh.za.com",nocase; classtype:attempted-recon; sid:200009702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.wdmxau.za.com",nocase; classtype:attempted-recon; sid:200009703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.whbfgy.za.com",nocase; classtype:attempted-recon; sid:200009704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.wposkr.za.com",nocase; classtype:attempted-recon; sid:200009705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.wpzqcb.za.com",nocase; classtype:attempted-recon; sid:200009706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.wvdxil.za.com",nocase; classtype:attempted-recon; sid:200009707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.wvpeyp.za.com",nocase; classtype:attempted-recon; sid:200009708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.wzqpee.za.com",nocase; classtype:attempted-recon; sid:200009709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.wzrrqp.za.com",nocase; classtype:attempted-recon; sid:200009710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.xbdhbi.za.com",nocase; classtype:attempted-recon; sid:200009711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.xfwrde.za.com",nocase; classtype:attempted-recon; sid:200009712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.xkgblw.za.com",nocase; classtype:attempted-recon; sid:200009713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.xnbziz.za.com",nocase; classtype:attempted-recon; sid:200009714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.xpyewd.za.com",nocase; classtype:attempted-recon; sid:200009715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ybqjcs.za.com",nocase; classtype:attempted-recon; sid:200009716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.yfxcpy.za.com",nocase; classtype:attempted-recon; sid:200009717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.yilvza.za.com",nocase; classtype:attempted-recon; sid:200009718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ymewff.za.com",nocase; classtype:attempted-recon; sid:200009719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.ynuzpu.za.com",nocase; classtype:attempted-recon; sid:200009720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.yqszfl.za.com",nocase; classtype:attempted-recon; sid:200009721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.yxzuhh.za.com",nocase; classtype:attempted-recon; sid:200009722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.zcmgqp.za.com",nocase; classtype:attempted-recon; sid:200009723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.zfbgqn.za.com",nocase; classtype:attempted-recon; sid:200009724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.zgjlxb.za.com",nocase; classtype:attempted-recon; sid:200009725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.zobtvb.za.com",nocase; classtype:attempted-recon; sid:200009726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.zsmfjr.za.com",nocase; classtype:attempted-recon; sid:200009727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.zznany.za.com",nocase; classtype:attempted-recon; sid:200009728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciaccnaovuvseon.visazcmcieseeainsi.zzwuas.za.com",nocase; classtype:attempted-recon; sid:200009729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.acysue.za.com",nocase; classtype:attempted-recon; sid:200009730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200009731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200009732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200009733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200009734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.airnja.za.com",nocase; classtype:attempted-recon; sid:200009735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200009736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200009737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200009738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200009739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200009740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200009741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.bangme.za.com",nocase; classtype:attempted-recon; sid:200009742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200009743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.befurr.za.com",nocase; classtype:attempted-recon; sid:200009744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200009745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200009746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200009747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200009748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200009749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200009750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200009751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200009752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200009753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200009754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200009755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200009756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200009757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200009758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200009759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200009760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200009761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200009762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200009763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200009764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200009765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200009766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200009767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200009768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200009769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200009770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200009771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200009772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200009773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200009774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200009775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200009776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200009777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200009778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200009779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200009780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200009781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200009782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200009783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.enksln.za.com",nocase; classtype:attempted-recon; sid:200009784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200009785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200009786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.equmej.za.com",nocase; classtype:attempted-recon; sid:200009787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200009788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200009789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200009790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200009791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200009792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200009793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200009794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200009795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200009796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200009797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.frroav.za.com",nocase; classtype:attempted-recon; sid:200009798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200009799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200009800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200009801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200009802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200009803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200009804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200009805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200009806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200009807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200009808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200009809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200009810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200009811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200009812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200009813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200009814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200009815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200009816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200009817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200009818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200009819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200009820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200009821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200009822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200009823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200009824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200009825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200009826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200009827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200009828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200009829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200009830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200009831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200009832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200009833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200009834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200009835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200009836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200009837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200009838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200009839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200009840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200009841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200009842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200009843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200009844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200009845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200009846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200009847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200009848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200009849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200009850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200009851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200009852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200009853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200009854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200009855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200009856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200009857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200009858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200009859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.laguer.za.com",nocase; classtype:attempted-recon; sid:200009860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200009861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200009862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200009863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200009864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200009865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200009866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200009867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200009868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200009869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200009870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200009871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.maivih.za.com",nocase; classtype:attempted-recon; sid:200009872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200009873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200009874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200009875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200009876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200009877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200009878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200009879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200009880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200009881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200009882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200009883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200009884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200009885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200009886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200009887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200009888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200009889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200009890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200009891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200009892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200009893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200009894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200009895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200009896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200009897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200009898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200009899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200009900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200009901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200009902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200009903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200009904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200009905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200009906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.oynnaf.za.com",nocase; classtype:attempted-recon; sid:200009907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.paivji.za.com",nocase; classtype:attempted-recon; sid:200009908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200009909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.pemrjn.za.com",nocase; classtype:attempted-recon; sid:200009910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.phkhrx.za.com",nocase; classtype:attempted-recon; sid:200009911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.picwiy.za.com",nocase; classtype:attempted-recon; sid:200009912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.pivwti.za.com",nocase; classtype:attempted-recon; sid:200009913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.pksqpw.za.com",nocase; classtype:attempted-recon; sid:200009914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ppwmzt.za.com",nocase; classtype:attempted-recon; sid:200009915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.puzdqh.za.com",nocase; classtype:attempted-recon; sid:200009916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.pvrmnc.za.com",nocase; classtype:attempted-recon; sid:200009917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.pxqicu.za.com",nocase; classtype:attempted-recon; sid:200009918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.qcpjmm.za.com",nocase; classtype:attempted-recon; sid:200009919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.qdwepk.za.com",nocase; classtype:attempted-recon; sid:200009920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.qfbzop.za.com",nocase; classtype:attempted-recon; sid:200009921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.qfrbez.za.com",nocase; classtype:attempted-recon; sid:200009922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.qgispn.za.com",nocase; classtype:attempted-recon; sid:200009923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200009924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.rfqqga.za.com",nocase; classtype:attempted-recon; sid:200009925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.rhbvvz.za.com",nocase; classtype:attempted-recon; sid:200009926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.rhfwsh.za.com",nocase; classtype:attempted-recon; sid:200009927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200009928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.rmpemt.za.com",nocase; classtype:attempted-recon; sid:200009929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.rmzoht.za.com",nocase; classtype:attempted-recon; sid:200009930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.rooreg.za.com",nocase; classtype:attempted-recon; sid:200009931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.rpfjaz.za.com",nocase; classtype:attempted-recon; sid:200009932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.rplout.za.com",nocase; classtype:attempted-recon; sid:200009933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.rsnklt.za.com",nocase; classtype:attempted-recon; sid:200009934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.rsuwkc.za.com",nocase; classtype:attempted-recon; sid:200009935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ryqtlk.za.com",nocase; classtype:attempted-recon; sid:200009936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.rzkyqg.za.com",nocase; classtype:attempted-recon; sid:200009937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.sjolxi.za.com",nocase; classtype:attempted-recon; sid:200009938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.snmrey.za.com",nocase; classtype:attempted-recon; sid:200009939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.sqmnsg.za.com",nocase; classtype:attempted-recon; sid:200009940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.srlqyc.za.com",nocase; classtype:attempted-recon; sid:200009941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.tcpzfk.za.com",nocase; classtype:attempted-recon; sid:200009942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200009943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.tfpdde.za.com",nocase; classtype:attempted-recon; sid:200009944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.tfwvbz.za.com",nocase; classtype:attempted-recon; sid:200009945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.tlvtct.za.com",nocase; classtype:attempted-recon; sid:200009946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.tlxfsd.za.com",nocase; classtype:attempted-recon; sid:200009947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.tmybve.za.com",nocase; classtype:attempted-recon; sid:200009948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.tubvou.za.com",nocase; classtype:attempted-recon; sid:200009949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.twbvyf.za.com",nocase; classtype:attempted-recon; sid:200009950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.tztcbk.za.com",nocase; classtype:attempted-recon; sid:200009951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.uesuju.za.com",nocase; classtype:attempted-recon; sid:200009952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.uhtsna.za.com",nocase; classtype:attempted-recon; sid:200009953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.uhuhey.za.com",nocase; classtype:attempted-recon; sid:200009954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.uiiavd.za.com",nocase; classtype:attempted-recon; sid:200009955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ujngcg.za.com",nocase; classtype:attempted-recon; sid:200009956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.uopoem.za.com",nocase; classtype:attempted-recon; sid:200009957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.urcrba.za.com",nocase; classtype:attempted-recon; sid:200009958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.utaekx.za.com",nocase; classtype:attempted-recon; sid:200009959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.uumird.za.com",nocase; classtype:attempted-recon; sid:200009960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.uyyfoa.za.com",nocase; classtype:attempted-recon; sid:200009961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.vvapfd.za.com",nocase; classtype:attempted-recon; sid:200009962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.vwprmh.za.com",nocase; classtype:attempted-recon; sid:200009963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.wdmxau.za.com",nocase; classtype:attempted-recon; sid:200009964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.whbfgy.za.com",nocase; classtype:attempted-recon; sid:200009965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.woddlo.za.com",nocase; classtype:attempted-recon; sid:200009966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.wposkr.za.com",nocase; classtype:attempted-recon; sid:200009967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.wpzqcb.za.com",nocase; classtype:attempted-recon; sid:200009968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.wvdxil.za.com",nocase; classtype:attempted-recon; sid:200009969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.wzrrqp.za.com",nocase; classtype:attempted-recon; sid:200009970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.xfwrde.za.com",nocase; classtype:attempted-recon; sid:200009971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.xkgblw.za.com",nocase; classtype:attempted-recon; sid:200009972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.xokvig.za.com",nocase; classtype:attempted-recon; sid:200009973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.yfxcpy.za.com",nocase; classtype:attempted-recon; sid:200009974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ygekte.za.com",nocase; classtype:attempted-recon; sid:200009975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.ymewff.za.com",nocase; classtype:attempted-recon; sid:200009976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.yptwya.za.com",nocase; classtype:attempted-recon; sid:200009977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.yvgrja.za.com",nocase; classtype:attempted-recon; sid:200009978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.yytmgo.za.com",nocase; classtype:attempted-recon; sid:200009979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.zckoua.za.com",nocase; classtype:attempted-recon; sid:200009980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.zcmgqp.za.com",nocase; classtype:attempted-recon; sid:200009981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.zfbgqn.za.com",nocase; classtype:attempted-recon; sid:200009982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.zgjlxb.za.com",nocase; classtype:attempted-recon; sid:200009983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.zlzusf.za.com",nocase; classtype:attempted-recon; sid:200009984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.zobtvb.za.com",nocase; classtype:attempted-recon; sid:200009985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.zsmfjr.za.com",nocase; classtype:attempted-recon; sid:200009986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.zznany.za.com",nocase; classtype:attempted-recon; sid:200009987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnnuesuzovvseon.visaczesevsiosi.zzwuas.za.com",nocase; classtype:attempted-recon; sid:200009988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.acdtum.za.com",nocase; classtype:attempted-recon; sid:200009989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.adoukk.za.com",nocase; classtype:attempted-recon; sid:200009990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.bbzbtx.za.com",nocase; classtype:attempted-recon; sid:200009991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.blxztu.za.com",nocase; classtype:attempted-recon; sid:200009992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.bnywlu.za.com",nocase; classtype:attempted-recon; sid:200009993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.bvjqmk.za.com",nocase; classtype:attempted-recon; sid:200009994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.cjimsd.za.com",nocase; classtype:attempted-recon; sid:200009995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.cozlty.za.com",nocase; classtype:attempted-recon; sid:200009996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.cxwohm.za.com",nocase; classtype:attempted-recon; sid:200009997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.dfmiex.za.com",nocase; classtype:attempted-recon; sid:200009998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.emiduh.za.com",nocase; classtype:attempted-recon; sid:200009999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.gggxpw.za.com",nocase; classtype:attempted-recon; sid:200010000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.hchaca.za.com",nocase; classtype:attempted-recon; sid:200010001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.hxxrxy.za.com",nocase; classtype:attempted-recon; sid:200010002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.iaoyzz.za.com",nocase; classtype:attempted-recon; sid:200010003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.ijpawu.za.com",nocase; classtype:attempted-recon; sid:200010004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.iowdcc.za.com",nocase; classtype:attempted-recon; sid:200010005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.joetyi.za.com",nocase; classtype:attempted-recon; sid:200010006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.jrvbcm.za.com",nocase; classtype:attempted-recon; sid:200010007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.jwnhul.za.com",nocase; classtype:attempted-recon; sid:200010008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.kaixbv.za.com",nocase; classtype:attempted-recon; sid:200010009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.lcadhp.za.com",nocase; classtype:attempted-recon; sid:200010010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.lquolu.za.com",nocase; classtype:attempted-recon; sid:200010011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.lvpxrb.za.com",nocase; classtype:attempted-recon; sid:200010012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.mcxugn.za.com",nocase; classtype:attempted-recon; sid:200010013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.nxdsar.za.com",nocase; classtype:attempted-recon; sid:200010014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.obeyjn.za.com",nocase; classtype:attempted-recon; sid:200010015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.oeayuk.za.com",nocase; classtype:attempted-recon; sid:200010016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.oplxoj.za.com",nocase; classtype:attempted-recon; sid:200010017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.phkavb.za.com",nocase; classtype:attempted-recon; sid:200010018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.piahby.za.com",nocase; classtype:attempted-recon; sid:200010019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.qzuuho.za.com",nocase; classtype:attempted-recon; sid:200010020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.rtwmgc.za.com",nocase; classtype:attempted-recon; sid:200010021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.spsvre.za.com",nocase; classtype:attempted-recon; sid:200010022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.szynbx.za.com",nocase; classtype:attempted-recon; sid:200010023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.tbtenr.za.com",nocase; classtype:attempted-recon; sid:200010024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.usrwro.za.com",nocase; classtype:attempted-recon; sid:200010025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.vckxwj.za.com",nocase; classtype:attempted-recon; sid:200010026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.vefkbx.za.com",nocase; classtype:attempted-recon; sid:200010027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.vndscu.za.com",nocase; classtype:attempted-recon; sid:200010028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.wtkudd.za.com",nocase; classtype:attempted-recon; sid:200010029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.wyothk.za.com",nocase; classtype:attempted-recon; sid:200010030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.xdjnuh.za.com",nocase; classtype:attempted-recon; sid:200010031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.xqjofw.za.com",nocase; classtype:attempted-recon; sid:200010032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.ybvvxi.za.com",nocase; classtype:attempted-recon; sid:200010033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.ycgkkz.za.com",nocase; classtype:attempted-recon; sid:200010034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciacnueszovvseon.visazeeevsioriursi.ypapkj.za.com",nocase; classtype:attempted-recon; sid:200010035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.acysue.za.com",nocase; classtype:attempted-recon; sid:200010036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200010037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200010038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200010039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200010040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.airnja.za.com",nocase; classtype:attempted-recon; sid:200010041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200010042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200010043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200010044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200010045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200010046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200010047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.bangme.za.com",nocase; classtype:attempted-recon; sid:200010048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200010049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.befurr.za.com",nocase; classtype:attempted-recon; sid:200010050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200010051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200010052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200010053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200010054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200010055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200010056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200010057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200010058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200010059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200010060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200010061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200010062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200010063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200010064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200010065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200010066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200010067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200010068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200010069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200010070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200010071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200010072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200010073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200010074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200010075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200010076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200010077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200010078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200010079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200010080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200010081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200010082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200010083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200010084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200010085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200010086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200010087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200010088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200010089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.enksln.za.com",nocase; classtype:attempted-recon; sid:200010090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200010091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200010092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.equmej.za.com",nocase; classtype:attempted-recon; sid:200010093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200010094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200010095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200010096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200010097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200010098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200010099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200010100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200010101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200010102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200010103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.frroav.za.com",nocase; classtype:attempted-recon; sid:200010104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200010105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200010106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200010107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200010108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200010109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200010110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200010111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200010112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200010113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200010114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200010115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200010116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200010117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200010118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200010119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200010120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200010121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200010122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200010123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200010124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200010125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200010126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200010127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200010128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200010129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200010130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200010131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200010132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200010133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200010134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200010135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200010136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200010137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200010138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200010139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200010140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200010141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200010142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200010143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200010144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200010145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200010146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200010147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200010148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200010149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200010150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200010151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200010152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200010153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200010154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200010155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200010156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200010157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200010158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200010159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200010160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200010161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200010162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200010163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200010164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200010165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.laguer.za.com",nocase; classtype:attempted-recon; sid:200010166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200010167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200010168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200010169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200010170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200010171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200010172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200010173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200010174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200010175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200010176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200010177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.maivih.za.com",nocase; classtype:attempted-recon; sid:200010178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200010179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200010180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200010181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200010182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200010183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200010184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200010185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200010186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200010187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200010188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200010189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200010190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200010191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200010192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200010193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200010194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200010195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200010196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200010197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200010198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200010199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200010200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200010201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200010202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200010203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200010204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200010205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200010206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200010207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200010208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200010209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200010210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200010211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200010212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200010213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.phkhrx.za.com",nocase; classtype:attempted-recon; sid:200010214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.picwiy.za.com",nocase; classtype:attempted-recon; sid:200010215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.pivwti.za.com",nocase; classtype:attempted-recon; sid:200010216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.pkdobq.za.com",nocase; classtype:attempted-recon; sid:200010217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.pvrmnc.za.com",nocase; classtype:attempted-recon; sid:200010218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.pxqicu.za.com",nocase; classtype:attempted-recon; sid:200010219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.qcpjmm.za.com",nocase; classtype:attempted-recon; sid:200010220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.qdwepk.za.com",nocase; classtype:attempted-recon; sid:200010221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.qfdotp.za.com",nocase; classtype:attempted-recon; sid:200010222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.qphuso.za.com",nocase; classtype:attempted-recon; sid:200010223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.qvfwma.za.com",nocase; classtype:attempted-recon; sid:200010224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200010225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.rclyhu.za.com",nocase; classtype:attempted-recon; sid:200010226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.reaqos.za.com",nocase; classtype:attempted-recon; sid:200010227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.rfqqga.za.com",nocase; classtype:attempted-recon; sid:200010228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.rhbvvz.za.com",nocase; classtype:attempted-recon; sid:200010229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200010230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200010231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.rmzoht.za.com",nocase; classtype:attempted-recon; sid:200010232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.roftae.za.com",nocase; classtype:attempted-recon; sid:200010233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.rooreg.za.com",nocase; classtype:attempted-recon; sid:200010234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.rplout.za.com",nocase; classtype:attempted-recon; sid:200010235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.rrajfi.za.com",nocase; classtype:attempted-recon; sid:200010236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.rujjog.za.com",nocase; classtype:attempted-recon; sid:200010237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ryqtlk.za.com",nocase; classtype:attempted-recon; sid:200010238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.rzkyqg.za.com",nocase; classtype:attempted-recon; sid:200010239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.scqqle.za.com",nocase; classtype:attempted-recon; sid:200010240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.sjolxi.za.com",nocase; classtype:attempted-recon; sid:200010241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.snmrey.za.com",nocase; classtype:attempted-recon; sid:200010242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.sqmnsg.za.com",nocase; classtype:attempted-recon; sid:200010243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.tayped.za.com",nocase; classtype:attempted-recon; sid:200010244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200010245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.tfpdde.za.com",nocase; classtype:attempted-recon; sid:200010246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.tipmxj.za.com",nocase; classtype:attempted-recon; sid:200010247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.tlvtct.za.com",nocase; classtype:attempted-recon; sid:200010248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.tlxfsd.za.com",nocase; classtype:attempted-recon; sid:200010249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.tmybve.za.com",nocase; classtype:attempted-recon; sid:200010250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.twbvyf.za.com",nocase; classtype:attempted-recon; sid:200010251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.uesuju.za.com",nocase; classtype:attempted-recon; sid:200010252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.uhtsna.za.com",nocase; classtype:attempted-recon; sid:200010253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ujngcg.za.com",nocase; classtype:attempted-recon; sid:200010254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.umfbax.za.com",nocase; classtype:attempted-recon; sid:200010255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.urycmw.za.com",nocase; classtype:attempted-recon; sid:200010256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.utaekx.za.com",nocase; classtype:attempted-recon; sid:200010257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.uumird.za.com",nocase; classtype:attempted-recon; sid:200010258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.vbwfva.za.com",nocase; classtype:attempted-recon; sid:200010259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.vdobfv.za.com",nocase; classtype:attempted-recon; sid:200010260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.virtxq.za.com",nocase; classtype:attempted-recon; sid:200010261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.vjwefx.za.com",nocase; classtype:attempted-recon; sid:200010262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.vstcza.za.com",nocase; classtype:attempted-recon; sid:200010263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.vvapfd.za.com",nocase; classtype:attempted-recon; sid:200010264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.vwprmh.za.com",nocase; classtype:attempted-recon; sid:200010265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.whbfgy.za.com",nocase; classtype:attempted-recon; sid:200010266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.woddlo.za.com",nocase; classtype:attempted-recon; sid:200010267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.wposkr.za.com",nocase; classtype:attempted-recon; sid:200010268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.wpzqcb.za.com",nocase; classtype:attempted-recon; sid:200010269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.wstujx.za.com",nocase; classtype:attempted-recon; sid:200010270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.wvdxil.za.com",nocase; classtype:attempted-recon; sid:200010271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.wzqpee.za.com",nocase; classtype:attempted-recon; sid:200010272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.xfwrde.za.com",nocase; classtype:attempted-recon; sid:200010273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.xnbziz.za.com",nocase; classtype:attempted-recon; sid:200010274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.xokvig.za.com",nocase; classtype:attempted-recon; sid:200010275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.xpyewd.za.com",nocase; classtype:attempted-recon; sid:200010276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ybqjcs.za.com",nocase; classtype:attempted-recon; sid:200010277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.yfxcpy.za.com",nocase; classtype:attempted-recon; sid:200010278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ygekte.za.com",nocase; classtype:attempted-recon; sid:200010279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.yilvzap.za.com",nocase; classtype:attempted-recon; sid:200010280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.ymewff.za.com",nocase; classtype:attempted-recon; sid:200010281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.yvgrja.za.com",nocase; classtype:attempted-recon; sid:200010282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.zckoua.za.com",nocase; classtype:attempted-recon; sid:200010283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.zcmgqp.za.com",nocase; classtype:attempted-recon; sid:200010284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.zlzusf.za.com",nocase; classtype:attempted-recon; sid:200010285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.zobtvb.za.com",nocase; classtype:attempted-recon; sid:200010286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacuaeovvseon.viscecsmireainsi.zzwuas.za.com",nocase; classtype:attempted-recon; sid:200010287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.acysue.za.com",nocase; classtype:attempted-recon; sid:200010288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200010289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200010290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200010291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200010292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.airnja.za.com",nocase; classtype:attempted-recon; sid:200010293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200010294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200010295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200010296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200010297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200010298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200010299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.bangme.za.com",nocase; classtype:attempted-recon; sid:200010300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200010301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.befurr.za.com",nocase; classtype:attempted-recon; sid:200010302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200010303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200010304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200010305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200010306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200010307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200010308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200010309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200010310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200010311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200010312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200010313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200010314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200010315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200010316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200010317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200010318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200010319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200010320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200010321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200010322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200010323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200010324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200010325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200010326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200010327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200010328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200010329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200010330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200010331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200010332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200010333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200010334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200010335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200010336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200010337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200010338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200010339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200010340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200010341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.enksln.za.com",nocase; classtype:attempted-recon; sid:200010342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200010343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200010344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.equmej.za.com",nocase; classtype:attempted-recon; sid:200010345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200010346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200010347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200010348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200010349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200010350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200010351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200010352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200010353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200010354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200010355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.frroav.za.com",nocase; classtype:attempted-recon; sid:200010356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200010357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200010358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200010359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200010360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200010361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200010362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200010363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200010364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200010365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200010366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200010367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200010368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200010369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200010370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200010371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200010372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200010373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200010374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200010375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200010376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200010377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200010378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200010379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200010380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200010381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200010382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200010383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200010384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200010385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200010386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200010387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200010388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200010389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200010390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200010391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200010392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200010393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200010394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200010395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200010396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200010397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200010398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200010399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200010400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200010401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200010402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200010403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200010404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200010405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200010406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200010407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200010408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200010409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200010410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200010411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200010412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200010413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200010414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200010415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200010416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200010417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.laguer.za.com",nocase; classtype:attempted-recon; sid:200010418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200010419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200010420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200010421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200010422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200010423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200010424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200010425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200010426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200010427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200010428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200010429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.maivih.za.com",nocase; classtype:attempted-recon; sid:200010430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200010431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200010432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200010433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200010434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200010435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200010436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200010437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200010438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200010439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200010440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200010441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200010442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200010443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200010444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200010445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200010446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200010447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200010448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200010449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200010450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200010451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200010452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200010453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200010454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200010455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200010456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200010457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200010458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200010459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200010460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200010461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200010462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200010463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200010464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ozgdvq.za.com",nocase; classtype:attempted-recon; sid:200010465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.paivji.za.com",nocase; classtype:attempted-recon; sid:200010466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200010467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.pemrjn.za.com",nocase; classtype:attempted-recon; sid:200010468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.phkhrx.za.com",nocase; classtype:attempted-recon; sid:200010469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.pkdobq.za.com",nocase; classtype:attempted-recon; sid:200010470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.pksqpw.za.com",nocase; classtype:attempted-recon; sid:200010471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.pvrmnc.za.com",nocase; classtype:attempted-recon; sid:200010472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.pxqicu.za.com",nocase; classtype:attempted-recon; sid:200010473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.qdwepk.za.com",nocase; classtype:attempted-recon; sid:200010474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.qfbzop.za.com",nocase; classtype:attempted-recon; sid:200010475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.qfrbez.za.com",nocase; classtype:attempted-recon; sid:200010476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.qgispn.za.com",nocase; classtype:attempted-recon; sid:200010477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.qphuso.za.com",nocase; classtype:attempted-recon; sid:200010478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.qwnduy.za.com",nocase; classtype:attempted-recon; sid:200010479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200010480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.rhfwsh.za.com",nocase; classtype:attempted-recon; sid:200010481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200010482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200010483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.rmzoht.za.com",nocase; classtype:attempted-recon; sid:200010484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.roftae.za.com",nocase; classtype:attempted-recon; sid:200010485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.rooreg.za.com",nocase; classtype:attempted-recon; sid:200010486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.rpfjaz.za.com",nocase; classtype:attempted-recon; sid:200010487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.rujjog.za.com",nocase; classtype:attempted-recon; sid:200010488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.rzkyqg.za.com",nocase; classtype:attempted-recon; sid:200010489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.scqqle.za.com",nocase; classtype:attempted-recon; sid:200010490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.snmrey.za.com",nocase; classtype:attempted-recon; sid:200010491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.srlqyc.za.com",nocase; classtype:attempted-recon; sid:200010492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.tayped.za.com",nocase; classtype:attempted-recon; sid:200010493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.tcpzfk.za.com",nocase; classtype:attempted-recon; sid:200010494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200010495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.tfpdde.za.com",nocase; classtype:attempted-recon; sid:200010496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.tfwvbz.za.com",nocase; classtype:attempted-recon; sid:200010497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.tipmxj.za.com",nocase; classtype:attempted-recon; sid:200010498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.tlxfsd.za.com",nocase; classtype:attempted-recon; sid:200010499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.twbvyf.za.com",nocase; classtype:attempted-recon; sid:200010500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.twozdd.za.com",nocase; classtype:attempted-recon; sid:200010501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.tztcbk.za.com",nocase; classtype:attempted-recon; sid:200010502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.uesuju.za.com",nocase; classtype:attempted-recon; sid:200010503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ugbucg.za.com",nocase; classtype:attempted-recon; sid:200010504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.uhtsna.za.com",nocase; classtype:attempted-recon; sid:200010505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.umfbax.za.com",nocase; classtype:attempted-recon; sid:200010506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.uopoem.za.com",nocase; classtype:attempted-recon; sid:200010507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.uvowom.za.com",nocase; classtype:attempted-recon; sid:200010508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.uyyfoa.za.com",nocase; classtype:attempted-recon; sid:200010509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.vdobfv.za.com",nocase; classtype:attempted-recon; sid:200010510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.virtxq.za.com",nocase; classtype:attempted-recon; sid:200010511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.vstcza.za.com",nocase; classtype:attempted-recon; sid:200010512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.wbuilk.za.com",nocase; classtype:attempted-recon; sid:200010513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.wposkr.za.com",nocase; classtype:attempted-recon; sid:200010514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.wpzqcb.za.com",nocase; classtype:attempted-recon; sid:200010515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.wstujx.za.com",nocase; classtype:attempted-recon; sid:200010516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.wvdxil.za.com",nocase; classtype:attempted-recon; sid:200010517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.wvpeyp.za.com",nocase; classtype:attempted-recon; sid:200010518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.wzrrqp.za.com",nocase; classtype:attempted-recon; sid:200010519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.xbdhbi.za.com",nocase; classtype:attempted-recon; sid:200010520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.xkgblw.za.com",nocase; classtype:attempted-recon; sid:200010521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.xnbziz.za.com",nocase; classtype:attempted-recon; sid:200010522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.xpyewd.za.com",nocase; classtype:attempted-recon; sid:200010523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ybqjcs.za.com",nocase; classtype:attempted-recon; sid:200010524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.yilvza.za.com",nocase; classtype:attempted-recon; sid:200010525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ymewff.za.com",nocase; classtype:attempted-recon; sid:200010526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.ynuzpu.za.com",nocase; classtype:attempted-recon; sid:200010527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.yptwya.za.com",nocase; classtype:attempted-recon; sid:200010528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.yqszfl.za.com",nocase; classtype:attempted-recon; sid:200010529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.yvgrja.za.com",nocase; classtype:attempted-recon; sid:200010530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.yytmgo.za.com",nocase; classtype:attempted-recon; sid:200010531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.zckoua.za.com",nocase; classtype:attempted-recon; sid:200010532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.zrsgyv.za.com",nocase; classtype:attempted-recon; sid:200010533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacucaeovseon.visceisureeinsi.zzwuas.za.com",nocase; classtype:attempted-recon; sid:200010534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.acysue.za.com",nocase; classtype:attempted-recon; sid:200010535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200010536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200010537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200010538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200010539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.airnja.za.com",nocase; classtype:attempted-recon; sid:200010540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200010541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200010542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200010543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200010544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200010545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200010546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.bangme.za.com",nocase; classtype:attempted-recon; sid:200010547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200010548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.befurr.za.com",nocase; classtype:attempted-recon; sid:200010549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200010550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200010551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200010552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200010553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200010554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200010555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200010556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200010557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200010558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200010559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200010560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200010561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200010562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200010563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200010564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200010565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200010566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200010567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200010568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200010569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200010570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200010571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200010572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200010573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200010574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200010575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200010576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200010577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200010578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200010579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200010580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200010581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200010582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200010583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200010584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200010585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200010586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200010587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200010588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.enksln.za.com",nocase; classtype:attempted-recon; sid:200010589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200010590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200010591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.equmej.za.com",nocase; classtype:attempted-recon; sid:200010592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200010593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200010594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200010595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200010596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200010597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200010598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200010599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200010600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200010601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200010602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.frroav.za.com",nocase; classtype:attempted-recon; sid:200010603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200010604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200010605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200010606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200010607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200010608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200010609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200010610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200010611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200010612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200010613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200010614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200010615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200010616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200010617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200010618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200010619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200010620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200010621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200010622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200010623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200010624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200010625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200010626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200010627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200010628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200010629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200010630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200010631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200010632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200010633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200010634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200010635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200010636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200010637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200010638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200010639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200010640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200010641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200010642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200010643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200010644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200010645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200010646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200010647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200010648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200010649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200010650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200010651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200010652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200010653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200010654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200010655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200010656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200010657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200010658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200010659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200010660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200010661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200010662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200010663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200010664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.laguer.za.com",nocase; classtype:attempted-recon; sid:200010665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200010666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200010667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200010668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200010669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200010670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200010671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200010672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200010673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200010674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200010675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200010676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.maivih.za.com",nocase; classtype:attempted-recon; sid:200010677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200010678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200010679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200010680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200010681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200010682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200010683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200010684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200010685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200010686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200010687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200010688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200010689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200010690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200010691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200010692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200010693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200010694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200010695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200010696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200010697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200010698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200010699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200010700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200010701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200010702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200010703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200010704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200010705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200010706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200010707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200010708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200010709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200010710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200010711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.oynnaf.za.com",nocase; classtype:attempted-recon; sid:200010712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ozgdvq.za.com",nocase; classtype:attempted-recon; sid:200010713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200010714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.phkhrx.za.com",nocase; classtype:attempted-recon; sid:200010715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.picwiy.za.com",nocase; classtype:attempted-recon; sid:200010716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.pivwti.za.com",nocase; classtype:attempted-recon; sid:200010717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.pkdobq.za.com",nocase; classtype:attempted-recon; sid:200010718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.pksqpw.za.com",nocase; classtype:attempted-recon; sid:200010719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.poigwz.za.com",nocase; classtype:attempted-recon; sid:200010720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ppwmzt.za.com",nocase; classtype:attempted-recon; sid:200010721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.puzdqh.za.com",nocase; classtype:attempted-recon; sid:200010722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.qcpjmm.za.com",nocase; classtype:attempted-recon; sid:200010723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.qdwepk.za.com",nocase; classtype:attempted-recon; sid:200010724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.qfbzop.za.com",nocase; classtype:attempted-recon; sid:200010725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.qfdotp.za.com",nocase; classtype:attempted-recon; sid:200010726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.qgispn.za.com",nocase; classtype:attempted-recon; sid:200010727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.qphuso.za.com",nocase; classtype:attempted-recon; sid:200010728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200010729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.rclyhu.za.com",nocase; classtype:attempted-recon; sid:200010730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.rfqqga.za.com",nocase; classtype:attempted-recon; sid:200010731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200010732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200010733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.rplout.za.com",nocase; classtype:attempted-recon; sid:200010734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.rsnklt.za.com",nocase; classtype:attempted-recon; sid:200010735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.rujjog.za.com",nocase; classtype:attempted-recon; sid:200010736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ryqtlk.za.com",nocase; classtype:attempted-recon; sid:200010737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.scqqle.za.com",nocase; classtype:attempted-recon; sid:200010738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.sjolxi.za.com",nocase; classtype:attempted-recon; sid:200010739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.sqmnsg.za.com",nocase; classtype:attempted-recon; sid:200010740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.srlqyc.za.com",nocase; classtype:attempted-recon; sid:200010741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.sztsok.za.com",nocase; classtype:attempted-recon; sid:200010742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.tayped.za.com",nocase; classtype:attempted-recon; sid:200010743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200010744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.tfpdde.za.com",nocase; classtype:attempted-recon; sid:200010745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.tfwvbz.za.com",nocase; classtype:attempted-recon; sid:200010746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.tipmxj.za.com",nocase; classtype:attempted-recon; sid:200010747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.tlvtct.za.com",nocase; classtype:attempted-recon; sid:200010748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.tubvou.za.com",nocase; classtype:attempted-recon; sid:200010749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.twbvyf.za.com",nocase; classtype:attempted-recon; sid:200010750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.twozdd.za.com",nocase; classtype:attempted-recon; sid:200010751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ufrjqp.za.com",nocase; classtype:attempted-recon; sid:200010752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ugbucg.za.com",nocase; classtype:attempted-recon; sid:200010753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.uhtsna.za.com",nocase; classtype:attempted-recon; sid:200010754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.uiiavd.za.com",nocase; classtype:attempted-recon; sid:200010755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ujngcg.za.com",nocase; classtype:attempted-recon; sid:200010756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.uopoem.za.com",nocase; classtype:attempted-recon; sid:200010757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.urycmw.za.com",nocase; classtype:attempted-recon; sid:200010758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.uumird.za.com",nocase; classtype:attempted-recon; sid:200010759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.uyyfoa.za.com",nocase; classtype:attempted-recon; sid:200010760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.vbwfva.za.com",nocase; classtype:attempted-recon; sid:200010761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.vdobfv.za.com",nocase; classtype:attempted-recon; sid:200010762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.virtxq.za.com",nocase; classtype:attempted-recon; sid:200010763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.vjwefx.za.com",nocase; classtype:attempted-recon; sid:200010764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.vstcza.za.com",nocase; classtype:attempted-recon; sid:200010765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.whbfgy.za.com",nocase; classtype:attempted-recon; sid:200010766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.woddlo.za.com",nocase; classtype:attempted-recon; sid:200010767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.wposkr.za.com",nocase; classtype:attempted-recon; sid:200010768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.wpzqcb.za.com",nocase; classtype:attempted-recon; sid:200010769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.wstujx.za.com",nocase; classtype:attempted-recon; sid:200010770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.wvdxil.za.com",nocase; classtype:attempted-recon; sid:200010771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.wvpeyp.za.com",nocase; classtype:attempted-recon; sid:200010772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.wzqpee.za.com",nocase; classtype:attempted-recon; sid:200010773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.xkgblw.za.com",nocase; classtype:attempted-recon; sid:200010774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.xnbziz.za.com",nocase; classtype:attempted-recon; sid:200010775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.ymewff.za.com",nocase; classtype:attempted-recon; sid:200010776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.yptwya.za.com",nocase; classtype:attempted-recon; sid:200010777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.yqszfl.za.com",nocase; classtype:attempted-recon; sid:200010778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.yytmgo.za.com",nocase; classtype:attempted-recon; sid:200010779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.zckoua.za.com",nocase; classtype:attempted-recon; sid:200010780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.zlzusf.za.com",nocase; classtype:attempted-recon; sid:200010781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.zobtvb.za.com",nocase; classtype:attempted-recon; sid:200010782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.zrsgyv.za.com",nocase; classtype:attempted-recon; sid:200010783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.zsmfjr.za.com",nocase; classtype:attempted-recon; sid:200010784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavinsacunureszovveon.cessazciursi.zzwuas.za.com",nocase; classtype:attempted-recon; sid:200010785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.acdtum.za.com",nocase; classtype:attempted-recon; sid:200010786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.adoukk.za.com",nocase; classtype:attempted-recon; sid:200010787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.akfmmu.za.com",nocase; classtype:attempted-recon; sid:200010788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.bgvjlj.za.com",nocase; classtype:attempted-recon; sid:200010789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.blrvdr.za.com",nocase; classtype:attempted-recon; sid:200010790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.bnrpkz.za.com",nocase; classtype:attempted-recon; sid:200010791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.bnywlu.za.com",nocase; classtype:attempted-recon; sid:200010792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.bvjqmk.za.com",nocase; classtype:attempted-recon; sid:200010793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.cbwqrw.za.com",nocase; classtype:attempted-recon; sid:200010794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.cjimsd.za.com",nocase; classtype:attempted-recon; sid:200010795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.cozlty.za.com",nocase; classtype:attempted-recon; sid:200010796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.cqqpsz.za.com",nocase; classtype:attempted-recon; sid:200010797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.dvqcit.za.com",nocase; classtype:attempted-recon; sid:200010798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.emiduh.za.com",nocase; classtype:attempted-recon; sid:200010799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.gedvrb.za.com",nocase; classtype:attempted-recon; sid:200010800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.gggxpw.za.com",nocase; classtype:attempted-recon; sid:200010801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.gltlxm.za.com",nocase; classtype:attempted-recon; sid:200010802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.hxxrxy.za.com",nocase; classtype:attempted-recon; sid:200010803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.hyxhne.za.com",nocase; classtype:attempted-recon; sid:200010804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.irpccg.za.com",nocase; classtype:attempted-recon; sid:200010805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.irxdzy.za.com",nocase; classtype:attempted-recon; sid:200010806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.jdtkva.za.com",nocase; classtype:attempted-recon; sid:200010807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.joetyi.za.com",nocase; classtype:attempted-recon; sid:200010808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.jrvbcm.za.com",nocase; classtype:attempted-recon; sid:200010809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.jwnhul.za.com",nocase; classtype:attempted-recon; sid:200010810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.kaixbv.za.com",nocase; classtype:attempted-recon; sid:200010811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.koxgxs.za.com",nocase; classtype:attempted-recon; sid:200010812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.kresvt.za.com",nocase; classtype:attempted-recon; sid:200010813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.lqtahv.za.com",nocase; classtype:attempted-recon; sid:200010814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.lquolu.za.com",nocase; classtype:attempted-recon; sid:200010815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.lvbccr.za.com",nocase; classtype:attempted-recon; sid:200010816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.mcxugn.za.com",nocase; classtype:attempted-recon; sid:200010817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.nxdsar.za.com",nocase; classtype:attempted-recon; sid:200010818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.odujie.za.com",nocase; classtype:attempted-recon; sid:200010819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.oeayuk.za.com",nocase; classtype:attempted-recon; sid:200010820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.olycnz.za.com",nocase; classtype:attempted-recon; sid:200010821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.phkavb.za.com",nocase; classtype:attempted-recon; sid:200010822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.piahby.za.com",nocase; classtype:attempted-recon; sid:200010823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.pigrir.za.com",nocase; classtype:attempted-recon; sid:200010824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.psicaz.za.com",nocase; classtype:attempted-recon; sid:200010825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.qsfxkv.za.com",nocase; classtype:attempted-recon; sid:200010826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.qthyus.za.com",nocase; classtype:attempted-recon; sid:200010827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.qzuuho.za.com",nocase; classtype:attempted-recon; sid:200010828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.rolbdo.za.com",nocase; classtype:attempted-recon; sid:200010829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.rqumqp.za.com",nocase; classtype:attempted-recon; sid:200010830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.swhgkf.za.com",nocase; classtype:attempted-recon; sid:200010831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.szynbx.za.com",nocase; classtype:attempted-recon; sid:200010832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.tbtenr.za.com",nocase; classtype:attempted-recon; sid:200010833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.tzzwdq.za.com",nocase; classtype:attempted-recon; sid:200010834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.uhzkns.za.com",nocase; classtype:attempted-recon; sid:200010835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.usrwro.za.com",nocase; classtype:attempted-recon; sid:200010836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.vefkbx.za.com",nocase; classtype:attempted-recon; sid:200010837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.vlqgmb.za.com",nocase; classtype:attempted-recon; sid:200010838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.vowycz.za.com",nocase; classtype:attempted-recon; sid:200010839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.wmbipa.za.com",nocase; classtype:attempted-recon; sid:200010840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.wtkudd.za.com",nocase; classtype:attempted-recon; sid:200010841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.xdjnuh.za.com",nocase; classtype:attempted-recon; sid:200010842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.xqjofw.za.com",nocase; classtype:attempted-recon; sid:200010843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.ybvvxi.za.com",nocase; classtype:attempted-recon; sid:200010844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.yozdqk.za.com",nocase; classtype:attempted-recon; sid:200010845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovseon.visaeiureeinsi.ywsztl.za.com",nocase; classtype:attempted-recon; sid:200010846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.balvnd.za.com",nocase; classtype:attempted-recon; sid:200010847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.bgvjlj.za.com",nocase; classtype:attempted-recon; sid:200010848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.blacvp.za.com",nocase; classtype:attempted-recon; sid:200010849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.blxztu.za.com",nocase; classtype:attempted-recon; sid:200010850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.bnywlu.za.com",nocase; classtype:attempted-recon; sid:200010851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.cjimsd.za.com",nocase; classtype:attempted-recon; sid:200010852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.cozlty.za.com",nocase; classtype:attempted-recon; sid:200010853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.cqqpsz.za.com",nocase; classtype:attempted-recon; sid:200010854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.cxwohm.za.com",nocase; classtype:attempted-recon; sid:200010855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.dfmiex.za.com",nocase; classtype:attempted-recon; sid:200010856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.dvqcit.za.com",nocase; classtype:attempted-recon; sid:200010857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.emiduh.za.com",nocase; classtype:attempted-recon; sid:200010858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.fmkgao.za.com",nocase; classtype:attempted-recon; sid:200010859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.geoqun.za.com",nocase; classtype:attempted-recon; sid:200010860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.iaoyzz.za.com",nocase; classtype:attempted-recon; sid:200010861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.ijpawu.za.com",nocase; classtype:attempted-recon; sid:200010862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.irpccg.za.com",nocase; classtype:attempted-recon; sid:200010863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.jgdgat.za.com",nocase; classtype:attempted-recon; sid:200010864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.joetyi.za.com",nocase; classtype:attempted-recon; sid:200010865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.kaixbv.za.com",nocase; classtype:attempted-recon; sid:200010866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.lqtahv.za.com",nocase; classtype:attempted-recon; sid:200010867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.lvbccr.za.com",nocase; classtype:attempted-recon; sid:200010868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.mcxugn.za.com",nocase; classtype:attempted-recon; sid:200010869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.obeyjn.za.com",nocase; classtype:attempted-recon; sid:200010870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.odujie.za.com",nocase; classtype:attempted-recon; sid:200010871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.olycnz.za.com",nocase; classtype:attempted-recon; sid:200010872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.oplxoj.za.com",nocase; classtype:attempted-recon; sid:200010873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.phkavb.za.com",nocase; classtype:attempted-recon; sid:200010874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.pqyvgi.za.com",nocase; classtype:attempted-recon; sid:200010875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.psicaz.za.com",nocase; classtype:attempted-recon; sid:200010876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.qmdgnc.za.com",nocase; classtype:attempted-recon; sid:200010877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.qsfxkv.za.com",nocase; classtype:attempted-recon; sid:200010878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.qthyus.za.com",nocase; classtype:attempted-recon; sid:200010879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.qzuuho.za.com",nocase; classtype:attempted-recon; sid:200010880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.rqumqp.za.com",nocase; classtype:attempted-recon; sid:200010881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.szynbx.za.com",nocase; classtype:attempted-recon; sid:200010882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.tbtenr.za.com",nocase; classtype:attempted-recon; sid:200010883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.tzzwdq.za.com",nocase; classtype:attempted-recon; sid:200010884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.usrwro.za.com",nocase; classtype:attempted-recon; sid:200010885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.vckxwj.za.com",nocase; classtype:attempted-recon; sid:200010886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.vlqgmb.za.com",nocase; classtype:attempted-recon; sid:200010887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.xdjnuh.za.com",nocase; classtype:attempted-recon; sid:200010888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.xqjofw.za.com",nocase; classtype:attempted-recon; sid:200010889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.ymsvdh.za.com",nocase; classtype:attempted-recon; sid:200010890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.yozdqk.za.com",nocase; classtype:attempted-recon; sid:200010891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.ypapkj.za.com",nocase; classtype:attempted-recon; sid:200010892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisaccaeovvseon.visecmiureainsi.ytpxmu.za.com",nocase; classtype:attempted-recon; sid:200010893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.acdtum.za.com",nocase; classtype:attempted-recon; sid:200010894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.adoukk.za.com",nocase; classtype:attempted-recon; sid:200010895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.akfmmu.za.com",nocase; classtype:attempted-recon; sid:200010896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.blrvdr.za.com",nocase; classtype:attempted-recon; sid:200010897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.blxztu.za.com",nocase; classtype:attempted-recon; sid:200010898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.bnrpkz.za.com",nocase; classtype:attempted-recon; sid:200010899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.bnywlu.za.com",nocase; classtype:attempted-recon; sid:200010900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.cxwohm.za.com",nocase; classtype:attempted-recon; sid:200010901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.dvqcit.za.com",nocase; classtype:attempted-recon; sid:200010902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.fmkgao.za.com",nocase; classtype:attempted-recon; sid:200010903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.fonuba.za.com",nocase; classtype:attempted-recon; sid:200010904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.gedvrb.za.com",nocase; classtype:attempted-recon; sid:200010905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.gggxpw.za.com",nocase; classtype:attempted-recon; sid:200010906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.gzauog.za.com",nocase; classtype:attempted-recon; sid:200010907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.hutqex.za.com",nocase; classtype:attempted-recon; sid:200010908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.hxxrxy.za.com",nocase; classtype:attempted-recon; sid:200010909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.iowdcc.za.com",nocase; classtype:attempted-recon; sid:200010910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.irpccg.za.com",nocase; classtype:attempted-recon; sid:200010911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.irxdzy.za.com",nocase; classtype:attempted-recon; sid:200010912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.jgdgat.za.com",nocase; classtype:attempted-recon; sid:200010913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.joetyi.za.com",nocase; classtype:attempted-recon; sid:200010914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.koxgxs.za.com",nocase; classtype:attempted-recon; sid:200010915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.lqtahv.za.com",nocase; classtype:attempted-recon; sid:200010916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.lvpxrb.za.com",nocase; classtype:attempted-recon; sid:200010917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.nxdsar.za.com",nocase; classtype:attempted-recon; sid:200010918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.obeyjn.za.com",nocase; classtype:attempted-recon; sid:200010919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.odujie.za.com",nocase; classtype:attempted-recon; sid:200010920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.olycnz.za.com",nocase; classtype:attempted-recon; sid:200010921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.oplxoj.za.com",nocase; classtype:attempted-recon; sid:200010922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.phkavb.za.com",nocase; classtype:attempted-recon; sid:200010923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.pqyvgi.za.com",nocase; classtype:attempted-recon; sid:200010924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.psicaz.za.com",nocase; classtype:attempted-recon; sid:200010925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.qthyus.za.com",nocase; classtype:attempted-recon; sid:200010926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.qzuuho.za.com",nocase; classtype:attempted-recon; sid:200010927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.rolbdo.za.com",nocase; classtype:attempted-recon; sid:200010928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.rqumqp.za.com",nocase; classtype:attempted-recon; sid:200010929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.swhgkf.za.com",nocase; classtype:attempted-recon; sid:200010930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.tzzwdq.za.com",nocase; classtype:attempted-recon; sid:200010931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.uhzkns.za.com",nocase; classtype:attempted-recon; sid:200010932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.usrwro.za.com",nocase; classtype:attempted-recon; sid:200010933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.vefkbx.za.com",nocase; classtype:attempted-recon; sid:200010934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.vndscu.za.com",nocase; classtype:attempted-recon; sid:200010935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.vowycz.za.com",nocase; classtype:attempted-recon; sid:200010936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.wtkudd.za.com",nocase; classtype:attempted-recon; sid:200010937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.wyothk.za.com",nocase; classtype:attempted-recon; sid:200010938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.xmvpwm.za.com",nocase; classtype:attempted-recon; sid:200010939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.xqjofw.za.com",nocase; classtype:attempted-recon; sid:200010940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.ybvvxi.za.com",nocase; classtype:attempted-recon; sid:200010941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcesioriursi.ytpxmu.za.com",nocase; classtype:attempted-recon; sid:200010942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.balvnd.za.com",nocase; classtype:attempted-recon; sid:200010943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.bbzbtx.za.com",nocase; classtype:attempted-recon; sid:200010944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.blxztu.za.com",nocase; classtype:attempted-recon; sid:200010945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.bnywlu.za.com",nocase; classtype:attempted-recon; sid:200010946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.bvjqmk.za.com",nocase; classtype:attempted-recon; sid:200010947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.dfmiex.za.com",nocase; classtype:attempted-recon; sid:200010948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.emiduh.za.com",nocase; classtype:attempted-recon; sid:200010949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.fmkgao.za.com",nocase; classtype:attempted-recon; sid:200010950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.gedvrb.za.com",nocase; classtype:attempted-recon; sid:200010951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.geoqun.za.com",nocase; classtype:attempted-recon; sid:200010952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.gggxpw.za.com",nocase; classtype:attempted-recon; sid:200010953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.gltlxm.za.com",nocase; classtype:attempted-recon; sid:200010954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.gzauog.za.com",nocase; classtype:attempted-recon; sid:200010955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.hutqex.za.com",nocase; classtype:attempted-recon; sid:200010956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.hxxrxy.za.com",nocase; classtype:attempted-recon; sid:200010957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.ijpawu.za.com",nocase; classtype:attempted-recon; sid:200010958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.ipqbiq.za.com",nocase; classtype:attempted-recon; sid:200010959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.irxdzy.za.com",nocase; classtype:attempted-recon; sid:200010960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.jdtkva.za.com",nocase; classtype:attempted-recon; sid:200010961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.joetyi.za.com",nocase; classtype:attempted-recon; sid:200010962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.koxgxs.za.com",nocase; classtype:attempted-recon; sid:200010963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.kresvt.za.com",nocase; classtype:attempted-recon; sid:200010964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.lvpxrb.za.com",nocase; classtype:attempted-recon; sid:200010965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.mcxugn.za.com",nocase; classtype:attempted-recon; sid:200010966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.obeyjn.za.com",nocase; classtype:attempted-recon; sid:200010967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.odujie.za.com",nocase; classtype:attempted-recon; sid:200010968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.oeayuk.za.com",nocase; classtype:attempted-recon; sid:200010969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.olycnz.za.com",nocase; classtype:attempted-recon; sid:200010970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.phkavb.za.com",nocase; classtype:attempted-recon; sid:200010971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.piahby.za.com",nocase; classtype:attempted-recon; sid:200010972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.pigrir.za.com",nocase; classtype:attempted-recon; sid:200010973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.psicaz.za.com",nocase; classtype:attempted-recon; sid:200010974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.qmdgnc.za.com",nocase; classtype:attempted-recon; sid:200010975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.qthyus.za.com",nocase; classtype:attempted-recon; sid:200010976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.sochye.za.com",nocase; classtype:attempted-recon; sid:200010977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.szynbx.za.com",nocase; classtype:attempted-recon; sid:200010978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.uhzkns.za.com",nocase; classtype:attempted-recon; sid:200010979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.usoqts.za.com",nocase; classtype:attempted-recon; sid:200010980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.usrwro.za.com",nocase; classtype:attempted-recon; sid:200010981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.vefkbx.za.com",nocase; classtype:attempted-recon; sid:200010982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.vlqgmb.za.com",nocase; classtype:attempted-recon; sid:200010983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.vowycz.za.com",nocase; classtype:attempted-recon; sid:200010984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.wyothk.za.com",nocase; classtype:attempted-recon; sid:200010985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.xdjnuh.za.com",nocase; classtype:attempted-recon; sid:200010986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.xmvpwm.za.com",nocase; classtype:attempted-recon; sid:200010987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.xqjofw.za.com",nocase; classtype:attempted-recon; sid:200010988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.ypapkj.za.com",nocase; classtype:attempted-recon; sid:200010989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.ytpxmu.za.com",nocase; classtype:attempted-recon; sid:200010990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciavisacnureszovvseon.esazcmevsioriursi.ywsztl.za.com",nocase; classtype:attempted-recon; sid:200010991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.adoukk.za.com",nocase; classtype:attempted-recon; sid:200010992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.akfmmu.za.com",nocase; classtype:attempted-recon; sid:200010993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.bgvjlj.za.com",nocase; classtype:attempted-recon; sid:200010994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.blacvp.za.com",nocase; classtype:attempted-recon; sid:200010995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.blxztu.za.com",nocase; classtype:attempted-recon; sid:200010996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.bnrpkz.za.com",nocase; classtype:attempted-recon; sid:200010997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.bnywlu.za.com",nocase; classtype:attempted-recon; sid:200010998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.bvjqmk.za.com",nocase; classtype:attempted-recon; sid:200010999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.cbwqrw.za.com",nocase; classtype:attempted-recon; sid:200011000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.cxwohm.za.com",nocase; classtype:attempted-recon; sid:200011001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.dvqcit.za.com",nocase; classtype:attempted-recon; sid:200011002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.emiduh.za.com",nocase; classtype:attempted-recon; sid:200011003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.gedvrb.za.com",nocase; classtype:attempted-recon; sid:200011004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.gggxpw.za.com",nocase; classtype:attempted-recon; sid:200011005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.gltlxm.za.com",nocase; classtype:attempted-recon; sid:200011006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.gzauog.za.com",nocase; classtype:attempted-recon; sid:200011007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.hyxhne.za.com",nocase; classtype:attempted-recon; sid:200011008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.ijpawu.za.com",nocase; classtype:attempted-recon; sid:200011009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.irpccg.za.com",nocase; classtype:attempted-recon; sid:200011010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.irxdzy.za.com",nocase; classtype:attempted-recon; sid:200011011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.jgdgat.za.com",nocase; classtype:attempted-recon; sid:200011012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.jrvbcm.za.com",nocase; classtype:attempted-recon; sid:200011013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.jwnhul.za.com",nocase; classtype:attempted-recon; sid:200011014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.koxgxs.za.com",nocase; classtype:attempted-recon; sid:200011015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.kresvt.za.com",nocase; classtype:attempted-recon; sid:200011016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.lcadhp.za.com",nocase; classtype:attempted-recon; sid:200011017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.lvbccr.za.com",nocase; classtype:attempted-recon; sid:200011018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.lvpxrb.za.com",nocase; classtype:attempted-recon; sid:200011019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.mcxugn.za.com",nocase; classtype:attempted-recon; sid:200011020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.obeyjn.za.com",nocase; classtype:attempted-recon; sid:200011021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.odujie.za.com",nocase; classtype:attempted-recon; sid:200011022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.oeayuk.za.com",nocase; classtype:attempted-recon; sid:200011023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.pqyvgi.za.com",nocase; classtype:attempted-recon; sid:200011024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.qipwcl.za.com",nocase; classtype:attempted-recon; sid:200011025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.qsfxkv.za.com",nocase; classtype:attempted-recon; sid:200011026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.qzuuho.za.com",nocase; classtype:attempted-recon; sid:200011027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.rqumqp.za.com",nocase; classtype:attempted-recon; sid:200011028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.rtwmgc.za.com",nocase; classtype:attempted-recon; sid:200011029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.spsvre.za.com",nocase; classtype:attempted-recon; sid:200011030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.tzzwdq.za.com",nocase; classtype:attempted-recon; sid:200011031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.usoqts.za.com",nocase; classtype:attempted-recon; sid:200011032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.vndscu.za.com",nocase; classtype:attempted-recon; sid:200011033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.wmbipa.za.com",nocase; classtype:attempted-recon; sid:200011034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.wtkudd.za.com",nocase; classtype:attempted-recon; sid:200011035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.xdjnuh.za.com",nocase; classtype:attempted-recon; sid:200011036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.xmvpwm.za.com",nocase; classtype:attempted-recon; sid:200011037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.ycgkkz.za.com",nocase; classtype:attempted-recon; sid:200011038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.yozdqk.za.com",nocase; classtype:attempted-recon; sid:200011039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiaccaoseon.visazcmieeenainsi.ywsztl.za.com",nocase; classtype:attempted-recon; sid:200011040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.acysue.za.com",nocase; classtype:attempted-recon; sid:200011041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200011042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200011043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200011044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200011045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.airnja.za.com",nocase; classtype:attempted-recon; sid:200011046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200011047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200011048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200011049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200011050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200011051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200011052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.bangme.za.com",nocase; classtype:attempted-recon; sid:200011053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200011054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.befurr.za.com",nocase; classtype:attempted-recon; sid:200011055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200011056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200011057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200011058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200011059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200011060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200011061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200011062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200011063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200011064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200011065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200011066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200011067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200011068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200011069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200011070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200011071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200011072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200011073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200011074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200011075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200011076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200011077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200011078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200011079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200011080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200011081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200011082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200011083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200011084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200011085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200011086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200011087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200011088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200011089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200011090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200011091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200011092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200011093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200011094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.enksln.za.com",nocase; classtype:attempted-recon; sid:200011095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200011096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200011097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.equmej.za.com",nocase; classtype:attempted-recon; sid:200011098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200011099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200011100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200011101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200011102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200011103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200011104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200011105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200011106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200011107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200011108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.frroav.za.com",nocase; classtype:attempted-recon; sid:200011109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200011110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200011111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200011112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200011113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200011114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200011115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200011116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200011117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200011118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200011119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200011120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200011121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200011122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200011123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200011124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200011125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200011126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200011127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200011128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200011129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200011130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200011131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200011132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200011133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200011134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200011135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200011136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200011137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200011138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200011139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200011140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200011141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200011142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200011143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200011144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200011145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200011146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200011147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200011148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200011149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200011150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200011151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200011152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200011153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200011154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200011155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200011156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200011157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200011158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200011159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200011160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200011161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200011162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200011163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200011164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200011165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200011166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200011167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200011168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200011169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200011170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.laguer.za.com",nocase; classtype:attempted-recon; sid:200011171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200011172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200011173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200011174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200011175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200011176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200011177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200011178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200011179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200011180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200011181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200011182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.maivih.za.com",nocase; classtype:attempted-recon; sid:200011183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200011184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200011185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200011186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200011187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200011188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200011189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200011190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200011191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200011192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200011193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200011194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200011195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200011196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200011197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200011198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200011199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200011200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200011201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200011202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200011203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200011204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200011205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200011206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200011207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200011208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200011209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200011210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200011211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200011212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200011213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200011214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200011215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200011216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200011217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200011218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.phkhrx.za.com",nocase; classtype:attempted-recon; sid:200011219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.picwiy.za.com",nocase; classtype:attempted-recon; sid:200011220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.pksqpw.za.com",nocase; classtype:attempted-recon; sid:200011221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.pxqicu.za.com",nocase; classtype:attempted-recon; sid:200011222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.qcpjmm.za.com",nocase; classtype:attempted-recon; sid:200011223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.qdwepk.za.com",nocase; classtype:attempted-recon; sid:200011224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.qfbzop.za.com",nocase; classtype:attempted-recon; sid:200011225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.qfdotp.za.com",nocase; classtype:attempted-recon; sid:200011226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.qfrbez.za.com",nocase; classtype:attempted-recon; sid:200011227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.qgispn.za.com",nocase; classtype:attempted-recon; sid:200011228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.qvfwma.za.com",nocase; classtype:attempted-recon; sid:200011229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.qwnduy.za.com",nocase; classtype:attempted-recon; sid:200011230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200011231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.rclyhu.za.com",nocase; classtype:attempted-recon; sid:200011232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.rhbvvz.za.com",nocase; classtype:attempted-recon; sid:200011233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.rhfwsh.za.com",nocase; classtype:attempted-recon; sid:200011234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200011235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200011236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.rmpemt.za.com",nocase; classtype:attempted-recon; sid:200011237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.roftae.za.com",nocase; classtype:attempted-recon; sid:200011238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.rpfjaz.za.com",nocase; classtype:attempted-recon; sid:200011239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.rplout.za.com",nocase; classtype:attempted-recon; sid:200011240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.rsnklt.za.com",nocase; classtype:attempted-recon; sid:200011241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.rsuwkc.za.com",nocase; classtype:attempted-recon; sid:200011242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.rujjog.za.com",nocase; classtype:attempted-recon; sid:200011243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ryqtlk.za.com",nocase; classtype:attempted-recon; sid:200011244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.rzkyqg.za.com",nocase; classtype:attempted-recon; sid:200011245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.scqqle.za.com",nocase; classtype:attempted-recon; sid:200011246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.snmrey.za.com",nocase; classtype:attempted-recon; sid:200011247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.sqmnsg.za.com",nocase; classtype:attempted-recon; sid:200011248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.tcpzfk.za.com",nocase; classtype:attempted-recon; sid:200011249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200011250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.tfpdde.za.com",nocase; classtype:attempted-recon; sid:200011251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.tfwvbz.za.com",nocase; classtype:attempted-recon; sid:200011252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.tipmxj.za.com",nocase; classtype:attempted-recon; sid:200011253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.tubvou.za.com",nocase; classtype:attempted-recon; sid:200011254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.twbvyf.za.com",nocase; classtype:attempted-recon; sid:200011255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.twozdd.za.com",nocase; classtype:attempted-recon; sid:200011256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.uesuju.za.com",nocase; classtype:attempted-recon; sid:200011257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ufrjqp.za.com",nocase; classtype:attempted-recon; sid:200011258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ugbucg.za.com",nocase; classtype:attempted-recon; sid:200011259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.uhuhey.za.com",nocase; classtype:attempted-recon; sid:200011260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.umfbax.za.com",nocase; classtype:attempted-recon; sid:200011261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.urcrba.za.com",nocase; classtype:attempted-recon; sid:200011262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.uumird.za.com",nocase; classtype:attempted-recon; sid:200011263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.vbwfva.za.com",nocase; classtype:attempted-recon; sid:200011264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.vdobfv.za.com",nocase; classtype:attempted-recon; sid:200011265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.virtxq.za.com",nocase; classtype:attempted-recon; sid:200011266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.vstcza.za.com",nocase; classtype:attempted-recon; sid:200011267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.vvapfd.za.com",nocase; classtype:attempted-recon; sid:200011268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.vwprmh.za.com",nocase; classtype:attempted-recon; sid:200011269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.whbfgy.za.com",nocase; classtype:attempted-recon; sid:200011270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.woddlo.za.com",nocase; classtype:attempted-recon; sid:200011271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.wpzqcb.za.com",nocase; classtype:attempted-recon; sid:200011272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.wstujx.za.com",nocase; classtype:attempted-recon; sid:200011273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.wvdxil.za.com",nocase; classtype:attempted-recon; sid:200011274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.wvpeyp.za.com",nocase; classtype:attempted-recon; sid:200011275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.wzqpee.za.com",nocase; classtype:attempted-recon; sid:200011276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.xfwrde.za.com",nocase; classtype:attempted-recon; sid:200011277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.xkgblw.za.com",nocase; classtype:attempted-recon; sid:200011278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.xokvig.za.com",nocase; classtype:attempted-recon; sid:200011279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.xpyewd.za.com",nocase; classtype:attempted-recon; sid:200011280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ybqjcs.za.com",nocase; classtype:attempted-recon; sid:200011281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ygekte.za.com",nocase; classtype:attempted-recon; sid:200011282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.ynuzpu.za.com",nocase; classtype:attempted-recon; sid:200011283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.yvgrja.za.com",nocase; classtype:attempted-recon; sid:200011284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.yxzuhh.za.com",nocase; classtype:attempted-recon; sid:200011285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.yytmgo.za.com",nocase; classtype:attempted-recon; sid:200011286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.zcmgqp.za.com",nocase; classtype:attempted-recon; sid:200011287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.zfbgqn.za.com",nocase; classtype:attempted-recon; sid:200011288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.zgjlxb.za.com",nocase; classtype:attempted-recon; sid:200011289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.zlzusf.za.com",nocase; classtype:attempted-recon; sid:200011290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.zznany.za.com",nocase; classtype:attempted-recon; sid:200011291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacncaouseon.visazcmiceesenainsi.zzwuas.za.com",nocase; classtype:attempted-recon; sid:200011292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.acysue.za.com",nocase; classtype:attempted-recon; sid:200011293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200011294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200011295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200011296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200011297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.airnja.za.com",nocase; classtype:attempted-recon; sid:200011298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200011299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200011300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200011301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200011302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200011303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200011304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.bangme.za.com",nocase; classtype:attempted-recon; sid:200011305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200011306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.befurr.za.com",nocase; classtype:attempted-recon; sid:200011307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200011308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200011309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200011310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200011311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200011312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200011313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200011314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200011315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200011316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200011317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200011318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200011319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200011320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200011321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200011322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200011323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200011324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200011325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200011326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200011327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200011328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200011329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200011330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200011331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200011332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200011333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200011334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200011335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200011336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200011337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200011338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200011339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200011340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200011341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200011342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200011343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200011344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200011345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200011346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.enksln.za.com",nocase; classtype:attempted-recon; sid:200011347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200011348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200011349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.equmej.za.com",nocase; classtype:attempted-recon; sid:200011350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200011351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200011352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200011353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200011354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200011355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200011356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200011357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200011358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200011359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200011360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.frroav.za.com",nocase; classtype:attempted-recon; sid:200011361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200011362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200011363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200011364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200011365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200011366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200011367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200011368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200011369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200011370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200011371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200011372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200011373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200011374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200011375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200011376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200011377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200011378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200011379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200011380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200011381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200011382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200011383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200011384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200011385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200011386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200011387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200011388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200011389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200011390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200011391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200011392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200011393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200011394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200011395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200011396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200011397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200011398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200011399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200011400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200011401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200011402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200011403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200011404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200011405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200011406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200011407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200011408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200011409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200011410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200011411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200011412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200011413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200011414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200011415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200011416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200011417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200011418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200011419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200011420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200011421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200011422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.laguer.za.com",nocase; classtype:attempted-recon; sid:200011423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200011424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200011425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200011426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200011427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200011428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200011429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200011430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200011431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200011432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200011433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200011434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.maivih.za.com",nocase; classtype:attempted-recon; sid:200011435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200011436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200011437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200011438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200011439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200011440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200011441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200011442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200011443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200011444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200011445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200011446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200011447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200011448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200011449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200011450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200011451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200011452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200011453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200011454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200011455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200011456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200011457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200011458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200011459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200011460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200011461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200011462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200011463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200011464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200011465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200011466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200011467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200011468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200011469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ozgdvq.za.com",nocase; classtype:attempted-recon; sid:200011470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200011471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.phkhrx.za.com",nocase; classtype:attempted-recon; sid:200011472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.pivwti.za.com",nocase; classtype:attempted-recon; sid:200011473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.pkdobq.za.com",nocase; classtype:attempted-recon; sid:200011474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.pksqpw.za.com",nocase; classtype:attempted-recon; sid:200011475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.poigwz.za.com",nocase; classtype:attempted-recon; sid:200011476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.pvrmnc.za.com",nocase; classtype:attempted-recon; sid:200011477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.pxqicu.za.com",nocase; classtype:attempted-recon; sid:200011478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.qcpjmm.za.com",nocase; classtype:attempted-recon; sid:200011479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.qdwepk.za.com",nocase; classtype:attempted-recon; sid:200011480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.qfbzop.za.com",nocase; classtype:attempted-recon; sid:200011481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.qphuso.za.com",nocase; classtype:attempted-recon; sid:200011482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200011483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.rclyhu.za.com",nocase; classtype:attempted-recon; sid:200011484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.rhbvvz.za.com",nocase; classtype:attempted-recon; sid:200011485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200011486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.tcpzfk.za.com",nocase; classtype:attempted-recon; sid:200011487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200011488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.tfwvbz.za.com",nocase; classtype:attempted-recon; sid:200011489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.tlvtct.za.com",nocase; classtype:attempted-recon; sid:200011490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.tlxfsd.za.com",nocase; classtype:attempted-recon; sid:200011491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.tmybve.za.com",nocase; classtype:attempted-recon; sid:200011492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.tubvou.za.com",nocase; classtype:attempted-recon; sid:200011493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.twozdd.za.com",nocase; classtype:attempted-recon; sid:200011494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.tztcbk.za.com",nocase; classtype:attempted-recon; sid:200011495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ugbucg.za.com",nocase; classtype:attempted-recon; sid:200011496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.uhtsna.za.com",nocase; classtype:attempted-recon; sid:200011497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.uhuhey.za.com",nocase; classtype:attempted-recon; sid:200011498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.umfbax.za.com",nocase; classtype:attempted-recon; sid:200011499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.uopoem.za.com",nocase; classtype:attempted-recon; sid:200011500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.urcrba.za.com",nocase; classtype:attempted-recon; sid:200011501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.urycmw.za.com",nocase; classtype:attempted-recon; sid:200011502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.utaekx.za.com",nocase; classtype:attempted-recon; sid:200011503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.uvowom.za.com",nocase; classtype:attempted-recon; sid:200011504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.uyyfoa.za.com",nocase; classtype:attempted-recon; sid:200011505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.vbwfva.za.com",nocase; classtype:attempted-recon; sid:200011506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.vstcza.za.com",nocase; classtype:attempted-recon; sid:200011507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.vvapfd.za.com",nocase; classtype:attempted-recon; sid:200011508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.vwprmh.za.com",nocase; classtype:attempted-recon; sid:200011509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.wbuilk.za.com",nocase; classtype:attempted-recon; sid:200011510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.wdmxau.za.com",nocase; classtype:attempted-recon; sid:200011511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.woddlo.za.com",nocase; classtype:attempted-recon; sid:200011512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.wvpeyp.za.com",nocase; classtype:attempted-recon; sid:200011513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.wzqpee.za.com",nocase; classtype:attempted-recon; sid:200011514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.wzrrqp.za.com",nocase; classtype:attempted-recon; sid:200011515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.xbdhbi.za.com",nocase; classtype:attempted-recon; sid:200011516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.xfwrde.za.com",nocase; classtype:attempted-recon; sid:200011517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.xkgblw.za.com",nocase; classtype:attempted-recon; sid:200011518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.xpyewd.za.com",nocase; classtype:attempted-recon; sid:200011519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ybqjcs.za.com",nocase; classtype:attempted-recon; sid:200011520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.yfxcpy.za.com",nocase; classtype:attempted-recon; sid:200011521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.ygekte.za.com",nocase; classtype:attempted-recon; sid:200011522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.yilvza.za.com",nocase; classtype:attempted-recon; sid:200011523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.yptwya.za.com",nocase; classtype:attempted-recon; sid:200011524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.yvgrja.za.com",nocase; classtype:attempted-recon; sid:200011525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.yxzuhh.za.com",nocase; classtype:attempted-recon; sid:200011526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.yytmgo.za.com",nocase; classtype:attempted-recon; sid:200011527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.zckoua.za.com",nocase; classtype:attempted-recon; sid:200011528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.zcmgqp.za.com",nocase; classtype:attempted-recon; sid:200011529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.zlzusf.za.com",nocase; classtype:attempted-recon; sid:200011530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.zobtvb.za.com",nocase; classtype:attempted-recon; sid:200011531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.zrsgyv.za.com",nocase; classtype:attempted-recon; sid:200011532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.zsmfjr.za.com",nocase; classtype:attempted-recon; sid:200011533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.zznany.za.com",nocase; classtype:attempted-recon; sid:200011534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnnueuovvseon.visazceesenvsioriursi.zzwuas.za.com",nocase; classtype:attempted-recon; sid:200011535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.akfmmu.za.com",nocase; classtype:attempted-recon; sid:200011536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.bbzbtx.za.com",nocase; classtype:attempted-recon; sid:200011537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.bgvjlj.za.com",nocase; classtype:attempted-recon; sid:200011538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.blrvdr.za.com",nocase; classtype:attempted-recon; sid:200011539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.blxztu.za.com",nocase; classtype:attempted-recon; sid:200011540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.bnrpkz.za.com",nocase; classtype:attempted-recon; sid:200011541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.cbwqrw.za.com",nocase; classtype:attempted-recon; sid:200011542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.dfmiex.za.com",nocase; classtype:attempted-recon; sid:200011543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.dvqcit.za.com",nocase; classtype:attempted-recon; sid:200011544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.gedvrb.za.com",nocase; classtype:attempted-recon; sid:200011545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.hjrhmw.za.com",nocase; classtype:attempted-recon; sid:200011546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.hxxrxy.za.com",nocase; classtype:attempted-recon; sid:200011547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.hyxhne.za.com",nocase; classtype:attempted-recon; sid:200011548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.irxdzy.za.com",nocase; classtype:attempted-recon; sid:200011549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.jgdgat.za.com",nocase; classtype:attempted-recon; sid:200011550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.jwnhul.za.com",nocase; classtype:attempted-recon; sid:200011551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.lcadhp.za.com",nocase; classtype:attempted-recon; sid:200011552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.lquolu.za.com",nocase; classtype:attempted-recon; sid:200011553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.odujie.za.com",nocase; classtype:attempted-recon; sid:200011554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.olycnz.za.com",nocase; classtype:attempted-recon; sid:200011555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.pgqcnr.za.com",nocase; classtype:attempted-recon; sid:200011556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.piahby.za.com",nocase; classtype:attempted-recon; sid:200011557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.pqyvgi.za.com",nocase; classtype:attempted-recon; sid:200011558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.qipwcl.za.com",nocase; classtype:attempted-recon; sid:200011559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.qmdgnc.za.com",nocase; classtype:attempted-recon; sid:200011560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.qthyus.za.com",nocase; classtype:attempted-recon; sid:200011561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.qzuuho.za.com",nocase; classtype:attempted-recon; sid:200011562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.rolbdo.za.com",nocase; classtype:attempted-recon; sid:200011563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.rtwmgc.za.com",nocase; classtype:attempted-recon; sid:200011564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.sochye.za.com",nocase; classtype:attempted-recon; sid:200011565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.swhgkf.za.com",nocase; classtype:attempted-recon; sid:200011566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.uhzkns.za.com",nocase; classtype:attempted-recon; sid:200011567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.usoqts.za.com",nocase; classtype:attempted-recon; sid:200011568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.usrwro.za.com",nocase; classtype:attempted-recon; sid:200011569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.vefkbx.za.com",nocase; classtype:attempted-recon; sid:200011570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.vndscu.za.com",nocase; classtype:attempted-recon; sid:200011571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.vowycz.za.com",nocase; classtype:attempted-recon; sid:200011572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.wmbipa.za.com",nocase; classtype:attempted-recon; sid:200011573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.xdjnuh.za.com",nocase; classtype:attempted-recon; sid:200011574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.xmvpwm.za.com",nocase; classtype:attempted-recon; sid:200011575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.ybvvxi.za.com",nocase; classtype:attempted-recon; sid:200011576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.ycgkkz.za.com",nocase; classtype:attempted-recon; sid:200011577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.ymsvdh.za.com",nocase; classtype:attempted-recon; sid:200011578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiacnueovvseon.visazeeenvsioriursi.yozdqk.za.com",nocase; classtype:attempted-recon; sid:200011579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.acdtum.za.com",nocase; classtype:attempted-recon; sid:200011580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.adoukk.za.com",nocase; classtype:attempted-recon; sid:200011581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.balvnd.za.com",nocase; classtype:attempted-recon; sid:200011582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.bgvjlj.za.com",nocase; classtype:attempted-recon; sid:200011583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.blrvdr.za.com",nocase; classtype:attempted-recon; sid:200011584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.bvjqmk.za.com",nocase; classtype:attempted-recon; sid:200011585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.cbwqrw.za.com",nocase; classtype:attempted-recon; sid:200011586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.cxwohm.za.com",nocase; classtype:attempted-recon; sid:200011587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.dfmiex.za.com",nocase; classtype:attempted-recon; sid:200011588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.fonuba.za.com",nocase; classtype:attempted-recon; sid:200011589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.geoqun.za.com",nocase; classtype:attempted-recon; sid:200011590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.gggxpw.za.com",nocase; classtype:attempted-recon; sid:200011591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.gzauog.za.com",nocase; classtype:attempted-recon; sid:200011592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.hutqex.za.com",nocase; classtype:attempted-recon; sid:200011593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.hyxhne.za.com",nocase; classtype:attempted-recon; sid:200011594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.iaoyzz.za.com",nocase; classtype:attempted-recon; sid:200011595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.iowdcc.za.com",nocase; classtype:attempted-recon; sid:200011596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.ipqbiq.za.com",nocase; classtype:attempted-recon; sid:200011597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.irpccg.za.com",nocase; classtype:attempted-recon; sid:200011598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.irxdzy.za.com",nocase; classtype:attempted-recon; sid:200011599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.jgdgat.za.com",nocase; classtype:attempted-recon; sid:200011600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.kresvt.za.com",nocase; classtype:attempted-recon; sid:200011601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.lcadhp.za.com",nocase; classtype:attempted-recon; sid:200011602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.lqtahv.za.com",nocase; classtype:attempted-recon; sid:200011603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.lquolu.za.com",nocase; classtype:attempted-recon; sid:200011604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.lvpxrb.za.com",nocase; classtype:attempted-recon; sid:200011605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.obeyjn.za.com",nocase; classtype:attempted-recon; sid:200011606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.oeayuk.za.com",nocase; classtype:attempted-recon; sid:200011607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.oplxoj.za.com",nocase; classtype:attempted-recon; sid:200011608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.piahby.za.com",nocase; classtype:attempted-recon; sid:200011609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.pigrir.za.com",nocase; classtype:attempted-recon; sid:200011610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.pqyvgi.za.com",nocase; classtype:attempted-recon; sid:200011611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.psicaz.za.com",nocase; classtype:attempted-recon; sid:200011612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.qmdgnc.za.com",nocase; classtype:attempted-recon; sid:200011613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.rolbdo.za.com",nocase; classtype:attempted-recon; sid:200011614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.rtwmgc.za.com",nocase; classtype:attempted-recon; sid:200011615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.sochye.za.com",nocase; classtype:attempted-recon; sid:200011616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.spsvre.za.com",nocase; classtype:attempted-recon; sid:200011617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.swhgkf.za.com",nocase; classtype:attempted-recon; sid:200011618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.tzzwdq.za.com",nocase; classtype:attempted-recon; sid:200011619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.uhzkns.za.com",nocase; classtype:attempted-recon; sid:200011620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.usoqts.za.com",nocase; classtype:attempted-recon; sid:200011621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.vndscu.za.com",nocase; classtype:attempted-recon; sid:200011622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.vowycz.za.com",nocase; classtype:attempted-recon; sid:200011623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.wtkudd.za.com",nocase; classtype:attempted-recon; sid:200011624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.xdjnuh.za.com",nocase; classtype:attempted-recon; sid:200011625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.xmvpwm.za.com",nocase; classtype:attempted-recon; sid:200011626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.ycgkkz.za.com",nocase; classtype:attempted-recon; sid:200011627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.yozdqk.za.com",nocase; classtype:attempted-recon; sid:200011628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovseon.visaeuenreeinsi.ywsztl.za.com",nocase; classtype:attempted-recon; sid:200011629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.acdtum.za.com",nocase; classtype:attempted-recon; sid:200011630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.adoukk.za.com",nocase; classtype:attempted-recon; sid:200011631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.balvnd.za.com",nocase; classtype:attempted-recon; sid:200011632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.bgvjlj.za.com",nocase; classtype:attempted-recon; sid:200011633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.blxztu.za.com",nocase; classtype:attempted-recon; sid:200011634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.bnrpkz.za.com",nocase; classtype:attempted-recon; sid:200011635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.bnywlu.za.com",nocase; classtype:attempted-recon; sid:200011636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.cjimsd.za.com",nocase; classtype:attempted-recon; sid:200011637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.dbmdfr.za.com",nocase; classtype:attempted-recon; sid:200011638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.dvqcit.za.com",nocase; classtype:attempted-recon; sid:200011639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.emiduh.za.com",nocase; classtype:attempted-recon; sid:200011640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.gedvrb.za.com",nocase; classtype:attempted-recon; sid:200011641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.gzauog.za.com",nocase; classtype:attempted-recon; sid:200011642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.hchaca.za.com",nocase; classtype:attempted-recon; sid:200011643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.iaoyzz.za.com",nocase; classtype:attempted-recon; sid:200011644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.irpccg.za.com",nocase; classtype:attempted-recon; sid:200011645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.irxdzy.za.com",nocase; classtype:attempted-recon; sid:200011646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.jrvbcm.za.com",nocase; classtype:attempted-recon; sid:200011647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.kresvt.za.com",nocase; classtype:attempted-recon; sid:200011648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.lcadhp.za.com",nocase; classtype:attempted-recon; sid:200011649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.lqtahv.za.com",nocase; classtype:attempted-recon; sid:200011650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.lquolu.za.com",nocase; classtype:attempted-recon; sid:200011651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.lvbccr.za.com",nocase; classtype:attempted-recon; sid:200011652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.mcxugn.za.com",nocase; classtype:attempted-recon; sid:200011653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.nxdsar.za.com",nocase; classtype:attempted-recon; sid:200011654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.obeyjn.za.com",nocase; classtype:attempted-recon; sid:200011655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.oeayuk.za.com",nocase; classtype:attempted-recon; sid:200011656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.olycnz.za.com",nocase; classtype:attempted-recon; sid:200011657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.oplxoj.za.com",nocase; classtype:attempted-recon; sid:200011658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.pgqcnr.za.com",nocase; classtype:attempted-recon; sid:200011659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.pigrir.za.com",nocase; classtype:attempted-recon; sid:200011660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.qipwcl.za.com",nocase; classtype:attempted-recon; sid:200011661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.qsfxkv.za.com",nocase; classtype:attempted-recon; sid:200011662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.qzuuho.za.com",nocase; classtype:attempted-recon; sid:200011663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.rtwmgc.za.com",nocase; classtype:attempted-recon; sid:200011664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.sochye.za.com",nocase; classtype:attempted-recon; sid:200011665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.swhgkf.za.com",nocase; classtype:attempted-recon; sid:200011666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.szynbx.za.com",nocase; classtype:attempted-recon; sid:200011667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.tbtenr.za.com",nocase; classtype:attempted-recon; sid:200011668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.uhzkns.za.com",nocase; classtype:attempted-recon; sid:200011669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.usoqts.za.com",nocase; classtype:attempted-recon; sid:200011670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.vckxwj.za.com",nocase; classtype:attempted-recon; sid:200011671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.vefkbx.za.com",nocase; classtype:attempted-recon; sid:200011672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.vlqgmb.za.com",nocase; classtype:attempted-recon; sid:200011673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.xdjnuh.za.com",nocase; classtype:attempted-recon; sid:200011674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.xqjofw.za.com",nocase; classtype:attempted-recon; sid:200011675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.ybvvxi.za.com",nocase; classtype:attempted-recon; sid:200011676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.yozdqk.za.com",nocase; classtype:attempted-recon; sid:200011677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.ypapkj.za.com",nocase; classtype:attempted-recon; sid:200011678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaaeovvseon.visemeniureainsi.ytpxmu.za.com",nocase; classtype:attempted-recon; sid:200011679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.acdtum.za.com",nocase; classtype:attempted-recon; sid:200011680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.balvnd.za.com",nocase; classtype:attempted-recon; sid:200011681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.bgvjlj.za.com",nocase; classtype:attempted-recon; sid:200011682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.blacvp.za.com",nocase; classtype:attempted-recon; sid:200011683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.bnywlu.za.com",nocase; classtype:attempted-recon; sid:200011684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.cbwqrw.za.com",nocase; classtype:attempted-recon; sid:200011685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.cxwohm.za.com",nocase; classtype:attempted-recon; sid:200011686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.dvqcit.za.com",nocase; classtype:attempted-recon; sid:200011687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.emiduh.za.com",nocase; classtype:attempted-recon; sid:200011688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.fonuba.za.com",nocase; classtype:attempted-recon; sid:200011689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.geoqun.za.com",nocase; classtype:attempted-recon; sid:200011690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.gltlxm.za.com",nocase; classtype:attempted-recon; sid:200011691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.gzauog.za.com",nocase; classtype:attempted-recon; sid:200011692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.hjrhmw.za.com",nocase; classtype:attempted-recon; sid:200011693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.hutqex.za.com",nocase; classtype:attempted-recon; sid:200011694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.hyxhne.za.com",nocase; classtype:attempted-recon; sid:200011695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.iaoyzz.za.com",nocase; classtype:attempted-recon; sid:200011696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.iowdcc.za.com",nocase; classtype:attempted-recon; sid:200011697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.irpccg.za.com",nocase; classtype:attempted-recon; sid:200011698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.jwnhul.za.com",nocase; classtype:attempted-recon; sid:200011699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.kaixbv.za.com",nocase; classtype:attempted-recon; sid:200011700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.kresvt.za.com",nocase; classtype:attempted-recon; sid:200011701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.lcadhp.za.com",nocase; classtype:attempted-recon; sid:200011702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.lqtahv.za.com",nocase; classtype:attempted-recon; sid:200011703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.lvbccr.za.com",nocase; classtype:attempted-recon; sid:200011704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.oeayuk.za.com",nocase; classtype:attempted-recon; sid:200011705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.olycnz.za.com",nocase; classtype:attempted-recon; sid:200011706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.oplxoj.za.com",nocase; classtype:attempted-recon; sid:200011707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.phkavb.za.com",nocase; classtype:attempted-recon; sid:200011708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.piahby.za.com",nocase; classtype:attempted-recon; sid:200011709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.pigrir.za.com",nocase; classtype:attempted-recon; sid:200011710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.pqyvgi.za.com",nocase; classtype:attempted-recon; sid:200011711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.psicaz.za.com",nocase; classtype:attempted-recon; sid:200011712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.qipwcl.za.com",nocase; classtype:attempted-recon; sid:200011713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.qmdgnc.za.com",nocase; classtype:attempted-recon; sid:200011714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.qsfxkv.za.com",nocase; classtype:attempted-recon; sid:200011715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.qzuuho.za.com",nocase; classtype:attempted-recon; sid:200011716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.sochye.za.com",nocase; classtype:attempted-recon; sid:200011717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.spsvre.za.com",nocase; classtype:attempted-recon; sid:200011718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.szynbx.za.com",nocase; classtype:attempted-recon; sid:200011719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.usoqts.za.com",nocase; classtype:attempted-recon; sid:200011720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.usrwro.za.com",nocase; classtype:attempted-recon; sid:200011721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.vefkbx.za.com",nocase; classtype:attempted-recon; sid:200011722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.vlqgmb.za.com",nocase; classtype:attempted-recon; sid:200011723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.vndscu.za.com",nocase; classtype:attempted-recon; sid:200011724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.vowycz.za.com",nocase; classtype:attempted-recon; sid:200011725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.wtkudd.za.com",nocase; classtype:attempted-recon; sid:200011726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.wyothk.za.com",nocase; classtype:attempted-recon; sid:200011727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.xmvpwm.za.com",nocase; classtype:attempted-recon; sid:200011728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.ybvvxi.za.com",nocase; classtype:attempted-recon; sid:200011729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.ymsvdh.za.com",nocase; classtype:attempted-recon; sid:200011730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.yozdqk.za.com",nocase; classtype:attempted-recon; sid:200011731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.ytpxmu.za.com",nocase; classtype:attempted-recon; sid:200011732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcesioriursi.ywsztl.za.com",nocase; classtype:attempted-recon; sid:200011733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.acdtum.za.com",nocase; classtype:attempted-recon; sid:200011734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.bbzbtx.za.com",nocase; classtype:attempted-recon; sid:200011735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.bgvjlj.za.com",nocase; classtype:attempted-recon; sid:200011736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.blacvp.za.com",nocase; classtype:attempted-recon; sid:200011737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.blrvdr.za.com",nocase; classtype:attempted-recon; sid:200011738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.blxztu.za.com",nocase; classtype:attempted-recon; sid:200011739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.bnrpkz.za.com",nocase; classtype:attempted-recon; sid:200011740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.bvjqmk.za.com",nocase; classtype:attempted-recon; sid:200011741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.cozlty.za.com",nocase; classtype:attempted-recon; sid:200011742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.cqqpsz.za.com",nocase; classtype:attempted-recon; sid:200011743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.dvqcit.za.com",nocase; classtype:attempted-recon; sid:200011744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.fmkgao.za.com",nocase; classtype:attempted-recon; sid:200011745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.gedvrb.za.com",nocase; classtype:attempted-recon; sid:200011746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.gzauog.za.com",nocase; classtype:attempted-recon; sid:200011747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.hxxrxy.za.com",nocase; classtype:attempted-recon; sid:200011748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.ijpawu.za.com",nocase; classtype:attempted-recon; sid:200011749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.ipqbiq.za.com",nocase; classtype:attempted-recon; sid:200011750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.irpccg.za.com",nocase; classtype:attempted-recon; sid:200011751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.jdtkva.za.com",nocase; classtype:attempted-recon; sid:200011752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.jgdgat.za.com",nocase; classtype:attempted-recon; sid:200011753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.joetyi.za.com",nocase; classtype:attempted-recon; sid:200011754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.jwnhul.za.com",nocase; classtype:attempted-recon; sid:200011755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.kresvt.za.com",nocase; classtype:attempted-recon; sid:200011756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.lcadhp.za.com",nocase; classtype:attempted-recon; sid:200011757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.lquolu.za.com",nocase; classtype:attempted-recon; sid:200011758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.lvbccr.za.com",nocase; classtype:attempted-recon; sid:200011759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.lvpxrb.za.com",nocase; classtype:attempted-recon; sid:200011760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.mcxugn.za.com",nocase; classtype:attempted-recon; sid:200011761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.nxdsar.za.com",nocase; classtype:attempted-recon; sid:200011762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.odujie.za.com",nocase; classtype:attempted-recon; sid:200011763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.oeayuk.za.com",nocase; classtype:attempted-recon; sid:200011764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.olycnz.za.com",nocase; classtype:attempted-recon; sid:200011765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.pgqcnr.za.com",nocase; classtype:attempted-recon; sid:200011766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.piahby.za.com",nocase; classtype:attempted-recon; sid:200011767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.pigrir.za.com",nocase; classtype:attempted-recon; sid:200011768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.pqyvgi.za.com",nocase; classtype:attempted-recon; sid:200011769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.qipwcl.za.com",nocase; classtype:attempted-recon; sid:200011770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.qmdgnc.za.com",nocase; classtype:attempted-recon; sid:200011771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.qsfxkv.za.com",nocase; classtype:attempted-recon; sid:200011772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.qthyus.za.com",nocase; classtype:attempted-recon; sid:200011773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.qzuuho.za.com",nocase; classtype:attempted-recon; sid:200011774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.rqumqp.za.com",nocase; classtype:attempted-recon; sid:200011775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.rtwmgc.za.com",nocase; classtype:attempted-recon; sid:200011776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.sochye.za.com",nocase; classtype:attempted-recon; sid:200011777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.spsvre.za.com",nocase; classtype:attempted-recon; sid:200011778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.tzzwdq.za.com",nocase; classtype:attempted-recon; sid:200011779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.vckxwj.za.com",nocase; classtype:attempted-recon; sid:200011780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.vefkbx.za.com",nocase; classtype:attempted-recon; sid:200011781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.vlqgmb.za.com",nocase; classtype:attempted-recon; sid:200011782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.vndscu.za.com",nocase; classtype:attempted-recon; sid:200011783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.vowycz.za.com",nocase; classtype:attempted-recon; sid:200011784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.wyothk.za.com",nocase; classtype:attempted-recon; sid:200011785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.xmvpwm.za.com",nocase; classtype:attempted-recon; sid:200011786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.xqjofw.za.com",nocase; classtype:attempted-recon; sid:200011787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.ybvvxi.za.com",nocase; classtype:attempted-recon; sid:200011788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.ymsvdh.za.com",nocase; classtype:attempted-recon; sid:200011789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.yozdqk.za.com",nocase; classtype:attempted-recon; sid:200011790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavisaureszovvseon.eaenzcmevsioriursi.ytpxmu.za.com",nocase; classtype:attempted-recon; sid:200011791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.acysue.za.com",nocase; classtype:attempted-recon; sid:200011792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200011793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200011794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200011795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200011796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.airnja.za.com",nocase; classtype:attempted-recon; sid:200011797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200011798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200011799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200011800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200011801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200011802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200011803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.bangme.za.com",nocase; classtype:attempted-recon; sid:200011804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200011805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.befurr.za.com",nocase; classtype:attempted-recon; sid:200011806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200011807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200011808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200011809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200011810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200011811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200011812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200011813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200011814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200011815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200011816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200011817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200011818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200011819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200011820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200011821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200011822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200011823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200011824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200011825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200011826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200011827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200011828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200011829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200011830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200011831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200011832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200011833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200011834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200011835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200011836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200011837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200011838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200011839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200011840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200011841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200011842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200011843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200011844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200011845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.enksln.za.com",nocase; classtype:attempted-recon; sid:200011846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200011847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200011848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.equmej.za.com",nocase; classtype:attempted-recon; sid:200011849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200011850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200011851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200011852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200011853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200011854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200011855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200011856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200011857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200011858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200011859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.frroav.za.com",nocase; classtype:attempted-recon; sid:200011860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200011861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200011862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200011863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200011864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200011865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200011866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200011867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200011868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200011869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200011870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200011871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200011872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200011873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200011874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200011875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200011876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200011877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200011878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200011879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200011880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200011881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200011882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200011883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200011884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200011885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200011886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200011887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200011888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200011889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200011890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200011891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200011892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200011893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200011894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200011895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200011896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200011897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200011898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200011899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200011900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200011901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200011902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200011903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200011904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200011905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200011906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200011907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200011908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200011909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200011910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200011911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200011912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200011913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200011914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200011915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200011916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200011917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200011918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200011919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200011920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200011921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.laguer.za.com",nocase; classtype:attempted-recon; sid:200011922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200011923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200011924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200011925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200011926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200011927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200011928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200011929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200011930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200011931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200011932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200011933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.maivih.za.com",nocase; classtype:attempted-recon; sid:200011934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200011935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200011936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200011937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200011938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200011939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200011940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200011941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200011942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200011943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200011944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200011945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200011946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200011947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200011948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200011949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200011950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200011951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200011952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200011953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200011954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200011955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200011956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200011957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200011958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200011959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200011960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200011961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200011962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200011963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200011964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200011965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200011966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200011967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200011968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ozgdvq.za.com",nocase; classtype:attempted-recon; sid:200011969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.paivji.za.com",nocase; classtype:attempted-recon; sid:200011970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200011971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.pemrjn.za.com",nocase; classtype:attempted-recon; sid:200011972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.pivwti.za.com",nocase; classtype:attempted-recon; sid:200011973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ppwmzt.za.com",nocase; classtype:attempted-recon; sid:200011974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.puzdqh.za.com",nocase; classtype:attempted-recon; sid:200011975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.pvrmnc.za.com",nocase; classtype:attempted-recon; sid:200011976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.pxqicu.za.com",nocase; classtype:attempted-recon; sid:200011977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.qcpjmm.za.com",nocase; classtype:attempted-recon; sid:200011978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.qdwepk.za.com",nocase; classtype:attempted-recon; sid:200011979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.qfbzop.za.com",nocase; classtype:attempted-recon; sid:200011980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.qgispn.za.com",nocase; classtype:attempted-recon; sid:200011981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.qphuso.za.com",nocase; classtype:attempted-recon; sid:200011982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.qwnduy.za.com",nocase; classtype:attempted-recon; sid:200011983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200011984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.rclyhu.za.com",nocase; classtype:attempted-recon; sid:200011985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200011986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.rplout.za.com",nocase; classtype:attempted-recon; sid:200011987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.rrajfi.za.com",nocase; classtype:attempted-recon; sid:200011988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.rzkyqg.za.com",nocase; classtype:attempted-recon; sid:200011989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.snmrey.za.com",nocase; classtype:attempted-recon; sid:200011990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.tcpzfk.za.com",nocase; classtype:attempted-recon; sid:200011991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200011992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.tmybve.za.com",nocase; classtype:attempted-recon; sid:200011993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.tubvou.za.com",nocase; classtype:attempted-recon; sid:200011994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.twozdd.za.com",nocase; classtype:attempted-recon; sid:200011995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.uesuju.za.com",nocase; classtype:attempted-recon; sid:200011996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.uhtsna.za.com",nocase; classtype:attempted-recon; sid:200011997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.uhuhey.za.com",nocase; classtype:attempted-recon; sid:200011998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.uiiavd.za.com",nocase; classtype:attempted-recon; sid:200011999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.umfbax.za.com",nocase; classtype:attempted-recon; sid:200012000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.uopoem.za.com",nocase; classtype:attempted-recon; sid:200012001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.urcrba.za.com",nocase; classtype:attempted-recon; sid:200012002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.urycmw.za.com",nocase; classtype:attempted-recon; sid:200012003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.utaekx.za.com",nocase; classtype:attempted-recon; sid:200012004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.uumird.za.com",nocase; classtype:attempted-recon; sid:200012005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.uvowom.za.com",nocase; classtype:attempted-recon; sid:200012006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.uyyfoa.za.com",nocase; classtype:attempted-recon; sid:200012007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.vbwfva.za.com",nocase; classtype:attempted-recon; sid:200012008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.vdobfv.za.com",nocase; classtype:attempted-recon; sid:200012009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.virtxq.za.com",nocase; classtype:attempted-recon; sid:200012010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.wzqpee.za.com",nocase; classtype:attempted-recon; sid:200012011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.xbdhbi.za.com",nocase; classtype:attempted-recon; sid:200012012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.xfwrde.za.com",nocase; classtype:attempted-recon; sid:200012013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.xkgblw.za.com",nocase; classtype:attempted-recon; sid:200012014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.xokvig.za.com",nocase; classtype:attempted-recon; sid:200012015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.xpyewd.za.com",nocase; classtype:attempted-recon; sid:200012016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ybqjcs.za.com",nocase; classtype:attempted-recon; sid:200012017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ygekte.za.com",nocase; classtype:attempted-recon; sid:200012018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.yilvza.za.com",nocase; classtype:attempted-recon; sid:200012019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.ymewff.za.com",nocase; classtype:attempted-recon; sid:200012020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.yptwya.za.com",nocase; classtype:attempted-recon; sid:200012021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.yvgrja.za.com",nocase; classtype:attempted-recon; sid:200012022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.zckoua.za.com",nocase; classtype:attempted-recon; sid:200012023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.zobtvb.za.com",nocase; classtype:attempted-recon; sid:200012024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.zsmfjr.za.com",nocase; classtype:attempted-recon; sid:200012025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovseon.visaceusenreeinsi.zzwuas.za.com",nocase; classtype:attempted-recon; sid:200012026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.acysue.za.com",nocase; classtype:attempted-recon; sid:200012027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200012028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200012029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200012030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200012031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.airnja.za.com",nocase; classtype:attempted-recon; sid:200012032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200012033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200012034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200012035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200012036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200012037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200012038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.bangme.za.com",nocase; classtype:attempted-recon; sid:200012039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200012040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.befurr.za.com",nocase; classtype:attempted-recon; sid:200012041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200012042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200012043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200012044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200012045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200012046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200012047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200012048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200012049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200012050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200012051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200012052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200012053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200012054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200012055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200012056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200012057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200012058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200012059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200012060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200012061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200012062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200012063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200012064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200012065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200012066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200012067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200012068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200012069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200012070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200012071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200012072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200012073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200012074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200012075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200012076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200012077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200012078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200012079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200012080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.enksln.za.com",nocase; classtype:attempted-recon; sid:200012081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200012082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200012083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.equmej.za.com",nocase; classtype:attempted-recon; sid:200012084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200012085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200012086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200012087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200012088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200012089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200012090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200012091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200012092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200012093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200012094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.frroav.za.com",nocase; classtype:attempted-recon; sid:200012095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200012096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200012097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200012098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200012099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200012100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200012101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200012102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200012103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200012104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200012105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200012106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200012107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200012108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200012109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200012110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200012111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200012112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200012113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200012114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200012115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200012116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200012117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200012118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200012119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200012120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200012121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200012122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200012123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200012124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200012125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200012126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200012127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200012128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200012129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200012130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200012131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200012132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200012133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200012134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200012135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200012136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200012137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200012138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200012139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200012140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200012141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200012142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200012143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200012144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200012145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200012146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200012147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200012148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200012149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200012150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200012151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200012152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200012153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200012154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200012155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200012156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.laguer.za.com",nocase; classtype:attempted-recon; sid:200012157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200012158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200012159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200012160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200012161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200012162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200012163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200012164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200012165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200012166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200012167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200012168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.maivih.za.com",nocase; classtype:attempted-recon; sid:200012169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200012170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200012171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200012172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200012173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200012174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200012175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200012176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200012177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200012178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200012179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200012180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200012181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200012182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200012183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200012184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200012185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200012186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200012187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200012188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200012189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200012190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200012191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200012192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200012193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200012194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200012195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200012196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200012197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200012198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200012199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200012200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200012201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200012202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200012203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ozgdvq.za.com",nocase; classtype:attempted-recon; sid:200012204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200012205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.pemrjn.za.com",nocase; classtype:attempted-recon; sid:200012206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.phkhrx.za.com",nocase; classtype:attempted-recon; sid:200012207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.picwiy.za.com",nocase; classtype:attempted-recon; sid:200012208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.pivwti.za.com",nocase; classtype:attempted-recon; sid:200012209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.pksqpw.za.com",nocase; classtype:attempted-recon; sid:200012210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.poigwz.za.com",nocase; classtype:attempted-recon; sid:200012211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ppwmzt.za.com",nocase; classtype:attempted-recon; sid:200012212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.puzdqh.za.com",nocase; classtype:attempted-recon; sid:200012213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.pvrmnc.za.com",nocase; classtype:attempted-recon; sid:200012214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.pxqicu.za.com",nocase; classtype:attempted-recon; sid:200012215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.qcpjmm.za.com",nocase; classtype:attempted-recon; sid:200012216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.qfbzop.za.com",nocase; classtype:attempted-recon; sid:200012217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.qfdotp.za.com",nocase; classtype:attempted-recon; sid:200012218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.qgispn.za.com",nocase; classtype:attempted-recon; sid:200012219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.qvfwma.za.com",nocase; classtype:attempted-recon; sid:200012220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.qwnduy.za.com",nocase; classtype:attempted-recon; sid:200012221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200012222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.rclyhu.za.com",nocase; classtype:attempted-recon; sid:200012223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.reaqos.za.com",nocase; classtype:attempted-recon; sid:200012224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.rhbvvz.za.com",nocase; classtype:attempted-recon; sid:200012225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200012226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200012227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.rmpemt.za.com",nocase; classtype:attempted-recon; sid:200012228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.rooreg.za.com",nocase; classtype:attempted-recon; sid:200012229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.rpfjaz.za.com",nocase; classtype:attempted-recon; sid:200012230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.rplout.za.com",nocase; classtype:attempted-recon; sid:200012231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.rrajfi.za.com",nocase; classtype:attempted-recon; sid:200012232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.rsuwkc.za.com",nocase; classtype:attempted-recon; sid:200012233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ryqtlk.za.com",nocase; classtype:attempted-recon; sid:200012234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.rzkyqg.za.com",nocase; classtype:attempted-recon; sid:200012235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.scqqle.za.com",nocase; classtype:attempted-recon; sid:200012236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.sqmnsg.za.com",nocase; classtype:attempted-recon; sid:200012237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.sztsok.za.com",nocase; classtype:attempted-recon; sid:200012238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.tcpzfk.za.com",nocase; classtype:attempted-recon; sid:200012239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200012240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.tfpdde.za.com",nocase; classtype:attempted-recon; sid:200012241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.tipmxj.za.com",nocase; classtype:attempted-recon; sid:200012242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.tlxfsd.za.com",nocase; classtype:attempted-recon; sid:200012243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.tubvou.za.com",nocase; classtype:attempted-recon; sid:200012244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.twozdd.za.com",nocase; classtype:attempted-recon; sid:200012245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.tztcbk.za.com",nocase; classtype:attempted-recon; sid:200012246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.uesuju.za.com",nocase; classtype:attempted-recon; sid:200012247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ufrjqp.za.com",nocase; classtype:attempted-recon; sid:200012248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ugbucg.za.com",nocase; classtype:attempted-recon; sid:200012249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.uhtsna.za.com",nocase; classtype:attempted-recon; sid:200012250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.uhuhey.za.com",nocase; classtype:attempted-recon; sid:200012251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.umfbax.za.com",nocase; classtype:attempted-recon; sid:200012252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.uopoem.za.com",nocase; classtype:attempted-recon; sid:200012253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.urcrba.za.com",nocase; classtype:attempted-recon; sid:200012254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.urycmw.za.com",nocase; classtype:attempted-recon; sid:200012255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.uyyfoa.za.com",nocase; classtype:attempted-recon; sid:200012256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.vbwfva.za.com",nocase; classtype:attempted-recon; sid:200012257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.virtxq.za.com",nocase; classtype:attempted-recon; sid:200012258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.vstcza.za.com",nocase; classtype:attempted-recon; sid:200012259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.vvapfd.za.com",nocase; classtype:attempted-recon; sid:200012260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.vwprmh.za.com",nocase; classtype:attempted-recon; sid:200012261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.wdmxau.za.com",nocase; classtype:attempted-recon; sid:200012262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.woddlo.za.com",nocase; classtype:attempted-recon; sid:200012263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.wposkr.za.com",nocase; classtype:attempted-recon; sid:200012264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.wstujx.za.com",nocase; classtype:attempted-recon; sid:200012265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.wvdxil.za.com",nocase; classtype:attempted-recon; sid:200012266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.wvpeyp.za.com",nocase; classtype:attempted-recon; sid:200012267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.wzqpee.za.com",nocase; classtype:attempted-recon; sid:200012268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.xfwrde.za.com",nocase; classtype:attempted-recon; sid:200012269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.xnbziz.za.com",nocase; classtype:attempted-recon; sid:200012270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.xpyewd.za.com",nocase; classtype:attempted-recon; sid:200012271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ybqjcs.za.com",nocase; classtype:attempted-recon; sid:200012272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.yfxcpy.za.com",nocase; classtype:attempted-recon; sid:200012273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ygekte.za.com",nocase; classtype:attempted-recon; sid:200012274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.yilvza.za.com",nocase; classtype:attempted-recon; sid:200012275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.ynuzpu.za.com",nocase; classtype:attempted-recon; sid:200012276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.yptwya.za.com",nocase; classtype:attempted-recon; sid:200012277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.yytmgo.za.com",nocase; classtype:attempted-recon; sid:200012278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.zckoua.za.com",nocase; classtype:attempted-recon; sid:200012279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.zcmgqp.za.com",nocase; classtype:attempted-recon; sid:200012280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauaeovvseon.viscemseniureainsi.zfbgqn.za.com",nocase; classtype:attempted-recon; sid:200012281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.acysue.za.com",nocase; classtype:attempted-recon; sid:200012282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200012283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200012284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200012285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200012286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.airnja.za.com",nocase; classtype:attempted-recon; sid:200012287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200012288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200012289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200012290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200012291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200012292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200012293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.bangme.za.com",nocase; classtype:attempted-recon; sid:200012294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200012295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.befurr.za.com",nocase; classtype:attempted-recon; sid:200012296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200012297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200012298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200012299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200012300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200012301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200012302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200012303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200012304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200012305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200012306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200012307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200012308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200012309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200012310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200012311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200012312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200012313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200012314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200012315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200012316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200012317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200012318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200012319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200012320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200012321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200012322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200012323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200012324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200012325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200012326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200012327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200012328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200012329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200012330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200012331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200012332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200012333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200012334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200012335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.enksln.za.com",nocase; classtype:attempted-recon; sid:200012336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200012337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200012338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.equmej.za.com",nocase; classtype:attempted-recon; sid:200012339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200012340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200012341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200012342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200012343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200012344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200012345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200012346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200012347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200012348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200012349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.frroav.za.com",nocase; classtype:attempted-recon; sid:200012350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200012351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200012352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200012353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200012354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200012355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200012356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200012357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200012358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200012359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200012360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200012361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200012362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200012363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200012364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200012365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200012366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200012367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200012368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200012369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200012370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200012371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200012372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200012373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200012374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200012375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200012376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200012377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200012378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200012379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200012380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200012381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200012382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200012383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200012384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200012385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200012386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200012387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200012388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200012389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200012390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200012391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200012392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200012393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200012394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200012395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200012396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200012397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200012398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200012399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200012400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200012401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200012402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200012403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200012404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200012405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200012406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200012407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200012408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200012409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200012410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200012411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.laguer.za.com",nocase; classtype:attempted-recon; sid:200012412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200012413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200012414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200012415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200012416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200012417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200012418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200012419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200012420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200012421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200012422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200012423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.maivih.za.com",nocase; classtype:attempted-recon; sid:200012424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200012425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200012426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200012427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200012428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200012429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200012430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200012431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200012432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200012433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200012434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200012435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200012436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200012437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200012438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200012439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200012440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200012441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200012442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200012443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200012444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200012445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200012446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200012447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200012448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200012449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200012450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200012451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200012452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200012453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200012454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200012455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200012456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200012457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.oynnaf.za.com",nocase; classtype:attempted-recon; sid:200012458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ozgdvq.za.com",nocase; classtype:attempted-recon; sid:200012459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200012460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.qfrbez.za.com",nocase; classtype:attempted-recon; sid:200012461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.qgispn.za.com",nocase; classtype:attempted-recon; sid:200012462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.qwnduy.za.com",nocase; classtype:attempted-recon; sid:200012463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.rclyhu.za.com",nocase; classtype:attempted-recon; sid:200012464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.reaqos.za.com",nocase; classtype:attempted-recon; sid:200012465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.rhfwsh.za.com",nocase; classtype:attempted-recon; sid:200012466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200012467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200012468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.rmpemt.za.com",nocase; classtype:attempted-recon; sid:200012469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.rmzoht.za.com",nocase; classtype:attempted-recon; sid:200012470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.rooreg.za.com",nocase; classtype:attempted-recon; sid:200012471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.rplout.za.com",nocase; classtype:attempted-recon; sid:200012472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.rsuwkc.za.com",nocase; classtype:attempted-recon; sid:200012473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.rujjog.za.com",nocase; classtype:attempted-recon; sid:200012474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ryqtlk.za.com",nocase; classtype:attempted-recon; sid:200012475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.rzkyqg.za.com",nocase; classtype:attempted-recon; sid:200012476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.scqqle.za.com",nocase; classtype:attempted-recon; sid:200012477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.sjolxi.za.com",nocase; classtype:attempted-recon; sid:200012478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.sqmnsg.za.com",nocase; classtype:attempted-recon; sid:200012479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.srlqyc.za.com",nocase; classtype:attempted-recon; sid:200012480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.sztsok.za.com",nocase; classtype:attempted-recon; sid:200012481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.tayped.za.com",nocase; classtype:attempted-recon; sid:200012482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.tcpzfk.za.com",nocase; classtype:attempted-recon; sid:200012483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200012484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.tfpdde.za.com",nocase; classtype:attempted-recon; sid:200012485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.tipmxj.za.com",nocase; classtype:attempted-recon; sid:200012486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.tlvtct.za.com",nocase; classtype:attempted-recon; sid:200012487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.tmybve.za.com",nocase; classtype:attempted-recon; sid:200012488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.tubvou.za.com",nocase; classtype:attempted-recon; sid:200012489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.twbvyf.za.com",nocase; classtype:attempted-recon; sid:200012490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.twozdd.za.com",nocase; classtype:attempted-recon; sid:200012491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.tztcbk.za.com",nocase; classtype:attempted-recon; sid:200012492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.uesuju.za.com",nocase; classtype:attempted-recon; sid:200012493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ugbucg.za.com",nocase; classtype:attempted-recon; sid:200012494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.uhuhey.za.com",nocase; classtype:attempted-recon; sid:200012495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.uiiavd.za.com",nocase; classtype:attempted-recon; sid:200012496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.umfbax.za.com",nocase; classtype:attempted-recon; sid:200012497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.urcrba.za.com",nocase; classtype:attempted-recon; sid:200012498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.utaekx.za.com",nocase; classtype:attempted-recon; sid:200012499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ybqjcs.za.com",nocase; classtype:attempted-recon; sid:200012500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.yfxcpy.za.com",nocase; classtype:attempted-recon; sid:200012501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ygekte.za.com",nocase; classtype:attempted-recon; sid:200012502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ymewff.za.com",nocase; classtype:attempted-recon; sid:200012503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.ynuzpu.za.com",nocase; classtype:attempted-recon; sid:200012504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.yqszfl.za.com",nocase; classtype:attempted-recon; sid:200012505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.yxzuhh.za.com",nocase; classtype:attempted-recon; sid:200012506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.zcmgqp.za.com",nocase; classtype:attempted-recon; sid:200012507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.zlzusf.za.com",nocase; classtype:attempted-recon; sid:200012508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.zobtvb.za.com",nocase; classtype:attempted-recon; sid:200012509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.zrsgyv.za.com",nocase; classtype:attempted-recon; sid:200012510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.zznany.za.com",nocase; classtype:attempted-recon; sid:200012511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcesioriursi.zzwuas.za.com",nocase; classtype:attempted-recon; sid:200012512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.acysue.za.com",nocase; classtype:attempted-recon; sid:200012513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200012514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200012515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200012516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200012517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.airnja.za.com",nocase; classtype:attempted-recon; sid:200012518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200012519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200012520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200012521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200012522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200012523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200012524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.bangme.za.com",nocase; classtype:attempted-recon; sid:200012525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200012526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.befurr.za.com",nocase; classtype:attempted-recon; sid:200012527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200012528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200012529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200012530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200012531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200012532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200012533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200012534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200012535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200012536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200012537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200012538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200012539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200012540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200012541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200012542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200012543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200012544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200012545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200012546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200012547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200012548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200012549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200012550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200012551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200012552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200012553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200012554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200012555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200012556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200012557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200012558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200012559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200012560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200012561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200012562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200012563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200012564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200012565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200012566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.enksln.za.com",nocase; classtype:attempted-recon; sid:200012567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200012568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200012569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.equmej.za.com",nocase; classtype:attempted-recon; sid:200012570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200012571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200012572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200012573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200012574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200012575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200012576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200012577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200012578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200012579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200012580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.frroav.za.com",nocase; classtype:attempted-recon; sid:200012581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200012582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200012583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200012584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200012585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200012586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200012587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200012588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200012589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200012590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200012591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200012592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200012593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200012594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200012595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200012596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200012597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200012598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200012599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200012600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200012601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200012602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200012603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200012604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200012605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200012606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200012607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200012608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200012609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200012610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200012611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200012612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200012613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200012614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200012615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200012616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200012617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200012618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200012619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200012620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200012621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200012622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200012623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200012624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200012625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200012626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200012627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200012628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200012629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200012630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200012631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200012632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200012633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200012634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200012635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200012636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200012637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200012638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200012639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200012640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200012641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200012642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.laguer.za.com",nocase; classtype:attempted-recon; sid:200012643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200012644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200012645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200012646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200012647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200012648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200012649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200012650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200012651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200012652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200012653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200012654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.maivih.za.com",nocase; classtype:attempted-recon; sid:200012655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200012656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200012657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200012658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200012659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200012660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200012661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200012662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200012663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200012664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200012665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200012666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200012667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200012668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200012669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200012670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200012671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200012672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200012673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200012674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200012675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200012676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200012677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200012678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200012679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200012680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200012681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200012682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200012683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200012684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200012685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200012686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200012687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200012688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200012689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.oynnaf.za.com",nocase; classtype:attempted-recon; sid:200012690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ozgdvq.za.com",nocase; classtype:attempted-recon; sid:200012691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.paivji.za.com",nocase; classtype:attempted-recon; sid:200012692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200012693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.pemrjn.za.com",nocase; classtype:attempted-recon; sid:200012694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.picwiy.za.com",nocase; classtype:attempted-recon; sid:200012695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.pkdobq.za.com",nocase; classtype:attempted-recon; sid:200012696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.poigwz.za.com",nocase; classtype:attempted-recon; sid:200012697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ppwmzt.za.com",nocase; classtype:attempted-recon; sid:200012698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.puzdqh.za.com",nocase; classtype:attempted-recon; sid:200012699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.pxqicu.za.com",nocase; classtype:attempted-recon; sid:200012700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.qvfwma.za.com",nocase; classtype:attempted-recon; sid:200012701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.qwnduy.za.com",nocase; classtype:attempted-recon; sid:200012702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.rclyhu.za.com",nocase; classtype:attempted-recon; sid:200012703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.reaqos.za.com",nocase; classtype:attempted-recon; sid:200012704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.rfqqga.za.com",nocase; classtype:attempted-recon; sid:200012705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.rhbvvz.za.com",nocase; classtype:attempted-recon; sid:200012706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.rhfwsh.za.com",nocase; classtype:attempted-recon; sid:200012707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200012708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.rmpemt.za.com",nocase; classtype:attempted-recon; sid:200012709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.rooreg.za.com",nocase; classtype:attempted-recon; sid:200012710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.rplout.za.com",nocase; classtype:attempted-recon; sid:200012711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.rsuwkc.za.com",nocase; classtype:attempted-recon; sid:200012712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.rujjog.za.com",nocase; classtype:attempted-recon; sid:200012713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.rzkyqg.za.com",nocase; classtype:attempted-recon; sid:200012714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.sjolxi.za.com",nocase; classtype:attempted-recon; sid:200012715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.snmrey.za.com",nocase; classtype:attempted-recon; sid:200012716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.sqmnsg.za.com",nocase; classtype:attempted-recon; sid:200012717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.sztsok.za.com",nocase; classtype:attempted-recon; sid:200012718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.tcpzfk.za.com",nocase; classtype:attempted-recon; sid:200012719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200012720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.tfwvbz.za.com",nocase; classtype:attempted-recon; sid:200012721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.tipmxj.za.com",nocase; classtype:attempted-recon; sid:200012722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.tlxfsd.za.com",nocase; classtype:attempted-recon; sid:200012723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.tmybve.za.com",nocase; classtype:attempted-recon; sid:200012724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.twbvyf.za.com",nocase; classtype:attempted-recon; sid:200012725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.twozdd.za.com",nocase; classtype:attempted-recon; sid:200012726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.tztcbk.za.com",nocase; classtype:attempted-recon; sid:200012727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.uesuju.za.com",nocase; classtype:attempted-recon; sid:200012728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ufrjqp.za.com",nocase; classtype:attempted-recon; sid:200012729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ujngcg.za.com",nocase; classtype:attempted-recon; sid:200012730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.umfbax.za.com",nocase; classtype:attempted-recon; sid:200012731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.urcrba.za.com",nocase; classtype:attempted-recon; sid:200012732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.utaekx.za.com",nocase; classtype:attempted-recon; sid:200012733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.uumird.za.com",nocase; classtype:attempted-recon; sid:200012734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.uvowom.za.com",nocase; classtype:attempted-recon; sid:200012735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.vbwfva.za.com",nocase; classtype:attempted-recon; sid:200012736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.vdobfv.za.com",nocase; classtype:attempted-recon; sid:200012737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.virtxq.za.com",nocase; classtype:attempted-recon; sid:200012738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.vjwefx.za.com",nocase; classtype:attempted-recon; sid:200012739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.vstcza.za.com",nocase; classtype:attempted-recon; sid:200012740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.vwprmh.za.com",nocase; classtype:attempted-recon; sid:200012741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.wbuilk.za.com",nocase; classtype:attempted-recon; sid:200012742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.wdmxau.za.com",nocase; classtype:attempted-recon; sid:200012743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.whbfgy.za.com",nocase; classtype:attempted-recon; sid:200012744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.woddlo.za.com",nocase; classtype:attempted-recon; sid:200012745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.wpzqcb.za.com",nocase; classtype:attempted-recon; sid:200012746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.wstujx.za.com",nocase; classtype:attempted-recon; sid:200012747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.wvdxil.za.com",nocase; classtype:attempted-recon; sid:200012748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.wzrrqp.za.com",nocase; classtype:attempted-recon; sid:200012749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.xkgblw.za.com",nocase; classtype:attempted-recon; sid:200012750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.xnbziz.za.com",nocase; classtype:attempted-recon; sid:200012751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.xokvig.za.com",nocase; classtype:attempted-recon; sid:200012752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.xpyewd.za.com",nocase; classtype:attempted-recon; sid:200012753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ymewff.za.com",nocase; classtype:attempted-recon; sid:200012754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.ynuzpu.za.com",nocase; classtype:attempted-recon; sid:200012755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.yptwya.za.com",nocase; classtype:attempted-recon; sid:200012756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.yvgrja.za.com",nocase; classtype:attempted-recon; sid:200012757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.zckoua.za.com",nocase; classtype:attempted-recon; sid:200012758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.zcmgqp.za.com",nocase; classtype:attempted-recon; sid:200012759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.zgjlxb.za.com",nocase; classtype:attempted-recon; sid:200012760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.zlzusf.za.com",nocase; classtype:attempted-recon; sid:200012761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.zobtvb.za.com",nocase; classtype:attempted-recon; sid:200012762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuciiavnisauureszovvseon.ceasenzcmevsioriursi.zrsgyv.za.com",nocase; classtype:attempted-recon; sid:200012763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.balvnd.za.com",nocase; classtype:attempted-recon; sid:200012764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.blacvp.za.com",nocase; classtype:attempted-recon; sid:200012765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.cozlty.za.com",nocase; classtype:attempted-recon; sid:200012766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.dbmdfr.za.com",nocase; classtype:attempted-recon; sid:200012767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.dfmiex.za.com",nocase; classtype:attempted-recon; sid:200012768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.dvqcit.za.com",nocase; classtype:attempted-recon; sid:200012769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.emiduh.za.com",nocase; classtype:attempted-recon; sid:200012770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.fonuba.za.com",nocase; classtype:attempted-recon; sid:200012771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.hchaca.za.com",nocase; classtype:attempted-recon; sid:200012772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.iaoyzz.za.com",nocase; classtype:attempted-recon; sid:200012773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.ipqbiq.za.com",nocase; classtype:attempted-recon; sid:200012774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.irpccg.za.com",nocase; classtype:attempted-recon; sid:200012775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.irxdzy.za.com",nocase; classtype:attempted-recon; sid:200012776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.jgdgat.za.com",nocase; classtype:attempted-recon; sid:200012777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.joetyi.za.com",nocase; classtype:attempted-recon; sid:200012778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.jrvbcm.za.com",nocase; classtype:attempted-recon; sid:200012779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.jwnhul.za.com",nocase; classtype:attempted-recon; sid:200012780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.kaixbv.za.com",nocase; classtype:attempted-recon; sid:200012781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.lqtahv.za.com",nocase; classtype:attempted-recon; sid:200012782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.lquolu.za.com",nocase; classtype:attempted-recon; sid:200012783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.lvpxrb.za.com",nocase; classtype:attempted-recon; sid:200012784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.obeyjn.za.com",nocase; classtype:attempted-recon; sid:200012785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.odujie.za.com",nocase; classtype:attempted-recon; sid:200012786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.oeayuk.za.com",nocase; classtype:attempted-recon; sid:200012787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.pgqcnr.za.com",nocase; classtype:attempted-recon; sid:200012788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.pqyvgi.za.com",nocase; classtype:attempted-recon; sid:200012789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.qipwcl.za.com",nocase; classtype:attempted-recon; sid:200012790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.qmdgnc.za.com",nocase; classtype:attempted-recon; sid:200012791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.qthyus.za.com",nocase; classtype:attempted-recon; sid:200012792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.rqumqp.za.com",nocase; classtype:attempted-recon; sid:200012793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.rtwmgc.za.com",nocase; classtype:attempted-recon; sid:200012794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.sochye.za.com",nocase; classtype:attempted-recon; sid:200012795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.spsvre.za.com",nocase; classtype:attempted-recon; sid:200012796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.tzzwdq.za.com",nocase; classtype:attempted-recon; sid:200012797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.uhzkns.za.com",nocase; classtype:attempted-recon; sid:200012798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.vefkbx.za.com",nocase; classtype:attempted-recon; sid:200012799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.wtkudd.za.com",nocase; classtype:attempted-recon; sid:200012800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.ybvvxi.za.com",nocase; classtype:attempted-recon; sid:200012801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.ycgkkz.za.com",nocase; classtype:attempted-recon; sid:200012802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.yozdqk.za.com",nocase; classtype:attempted-recon; sid:200012803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaeovvseon.visazcmiureeainsi.ytpxmu.za.com",nocase; classtype:attempted-recon; sid:200012804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.acysue.za.com",nocase; classtype:attempted-recon; sid:200012805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200012806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200012807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200012808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200012809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.airnja.za.com",nocase; classtype:attempted-recon; sid:200012810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200012811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200012812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200012813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200012814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200012815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200012816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.bangme.za.com",nocase; classtype:attempted-recon; sid:200012817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200012818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.befurr.za.com",nocase; classtype:attempted-recon; sid:200012819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200012820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200012821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200012822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200012823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200012824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200012825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200012826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200012827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200012828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200012829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200012830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200012831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200012832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200012833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200012834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200012835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200012836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200012837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200012838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200012839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200012840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200012841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200012842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200012843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200012844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200012845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200012846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200012847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200012848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200012849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200012850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200012851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200012852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200012853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200012854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200012855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200012856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200012857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200012858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.enksln.za.com",nocase; classtype:attempted-recon; sid:200012859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200012860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200012861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.equmej.za.com",nocase; classtype:attempted-recon; sid:200012862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200012863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200012864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200012865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200012866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200012867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200012868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200012869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200012870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200012871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200012872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.frroav.za.com",nocase; classtype:attempted-recon; sid:200012873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200012874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200012875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200012876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200012877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200012878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200012879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200012880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200012881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200012882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200012883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200012884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200012885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200012886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200012887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200012888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200012889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200012890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200012891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200012892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200012893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200012894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200012895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200012896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200012897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200012898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200012899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200012900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200012901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200012902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200012903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200012904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200012905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200012906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200012907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200012908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200012909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200012910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200012911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200012912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200012913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200012914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200012915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200012916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200012917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200012918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200012919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200012920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200012921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200012922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200012923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200012924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200012925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200012926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200012927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200012928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200012929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200012930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200012931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.laguer.za.com",nocase; classtype:attempted-recon; sid:200012932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200012933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200012934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200012935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200012936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200012937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200012938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200012939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200012940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200012941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200012942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200012943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.maivih.za.com",nocase; classtype:attempted-recon; sid:200012944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200012945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200012946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200012947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200012948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200012949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200012950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200012951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200012952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200012953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200012954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200012955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200012956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200012957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200012958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200012959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200012960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200012961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200012962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200012963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200012964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200012965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200012966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200012967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200012968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200012969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200012970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200012971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200012972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200012973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200012974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200012975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200012976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200012977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200012978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.oynnaf.za.com",nocase; classtype:attempted-recon; sid:200012979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.paivji.za.com",nocase; classtype:attempted-recon; sid:200012980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200012981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.pemrjn.za.com",nocase; classtype:attempted-recon; sid:200012982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.pivwti.za.com",nocase; classtype:attempted-recon; sid:200012983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.pkdobq.za.com",nocase; classtype:attempted-recon; sid:200012984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.pksqpw.za.com",nocase; classtype:attempted-recon; sid:200012985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.poigwz.za.com",nocase; classtype:attempted-recon; sid:200012986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.puzdqh.za.com",nocase; classtype:attempted-recon; sid:200012987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.pvrmnc.za.com",nocase; classtype:attempted-recon; sid:200012988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.pxqicu.za.com",nocase; classtype:attempted-recon; sid:200012989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.qfbzop.za.com",nocase; classtype:attempted-recon; sid:200012990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaccaneovuvseon.visazcmciusreeainsi.qfdotp.za.com",nocase; classtype:attempted-recon; sid:200012991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200012992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.airnja.za.com",nocase; classtype:attempted-recon; sid:200012993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200012994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200012995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200012996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200012997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200012998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200012999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.bangme.za.com",nocase; classtype:attempted-recon; sid:200013000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200013001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.befurr.za.com",nocase; classtype:attempted-recon; sid:200013002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200013003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200013004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200013005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200013006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200013007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200013008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200013009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200013010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200013011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200013012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200013013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200013014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200013015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200013016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200013017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200013018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200013019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200013020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200013021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200013022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200013023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200013024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200013025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200013026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200013027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200013028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200013029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200013030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200013031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200013032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200013033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200013034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200013035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200013036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200013037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200013038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.enksln.za.com",nocase; classtype:attempted-recon; sid:200013039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200013040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200013041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.equmej.za.com",nocase; classtype:attempted-recon; sid:200013042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200013043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200013044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200013045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200013046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200013047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200013048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200013049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200013050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200013051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200013052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.frroav.za.com",nocase; classtype:attempted-recon; sid:200013053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200013054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200013055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200013056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200013057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200013058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200013059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200013060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200013061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200013062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200013063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200013064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200013065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200013066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200013067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200013068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200013069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200013070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200013071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200013072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200013073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200013074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200013075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200013076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200013077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200013078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200013079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200013080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200013081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200013082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200013083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200013084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200013085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200013086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200013087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200013088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200013089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200013090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200013091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200013092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200013093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200013094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200013095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200013096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200013097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200013098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200013099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200013100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200013101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200013102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200013103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200013104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200013105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200013106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200013107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200013108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200013109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200013110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200013111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200013112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200013113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200013114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.laguer.za.com",nocase; classtype:attempted-recon; sid:200013115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200013116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200013117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200013118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200013119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200013120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200013121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200013122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200013123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200013124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200013125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200013126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.maivih.za.com",nocase; classtype:attempted-recon; sid:200013127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200013128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200013129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200013130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200013131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200013132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200013133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200013134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200013135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200013136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200013137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200013138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200013139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200013140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200013141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200013142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200013143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200013144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200013145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200013146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200013147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200013148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200013149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200013150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200013151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200013152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200013153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200013154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200013155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200013156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200013157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200013158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200013159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ozgdvq.za.com",nocase; classtype:attempted-recon; sid:200013160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200013161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.phkhrx.za.com",nocase; classtype:attempted-recon; sid:200013162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.pkdobq.za.com",nocase; classtype:attempted-recon; sid:200013163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.puzdqh.za.com",nocase; classtype:attempted-recon; sid:200013164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.pvrmnc.za.com",nocase; classtype:attempted-recon; sid:200013165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.pxqicu.za.com",nocase; classtype:attempted-recon; sid:200013166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.qcpjmm.za.com",nocase; classtype:attempted-recon; sid:200013167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.qdwepk.za.com",nocase; classtype:attempted-recon; sid:200013168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.qfbzop.za.com",nocase; classtype:attempted-recon; sid:200013169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.qfdotp.za.com",nocase; classtype:attempted-recon; sid:200013170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.qfrbez.za.com",nocase; classtype:attempted-recon; sid:200013171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.qwnduy.za.com",nocase; classtype:attempted-recon; sid:200013172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200013173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.rclyhu.za.com",nocase; classtype:attempted-recon; sid:200013174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.rfqqga.za.com",nocase; classtype:attempted-recon; sid:200013175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200013176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200013177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.rmzoht.za.com",nocase; classtype:attempted-recon; sid:200013178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.roftae.za.com",nocase; classtype:attempted-recon; sid:200013179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.rooreg.za.com",nocase; classtype:attempted-recon; sid:200013180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.rpfjaz.za.com",nocase; classtype:attempted-recon; sid:200013181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.rrajfi.za.com",nocase; classtype:attempted-recon; sid:200013182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.rsuwkc.za.com",nocase; classtype:attempted-recon; sid:200013183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.rujjog.za.com",nocase; classtype:attempted-recon; sid:200013184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ryqtlk.za.com",nocase; classtype:attempted-recon; sid:200013185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.rzkyqg.za.com",nocase; classtype:attempted-recon; sid:200013186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.sjolxi.za.com",nocase; classtype:attempted-recon; sid:200013187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.snmrey.za.com",nocase; classtype:attempted-recon; sid:200013188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.sqmnsg.za.com",nocase; classtype:attempted-recon; sid:200013189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.tcpzfk.za.com",nocase; classtype:attempted-recon; sid:200013190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200013191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.tfwvbz.za.com",nocase; classtype:attempted-recon; sid:200013192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.tipmxj.za.com",nocase; classtype:attempted-recon; sid:200013193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.tlvtct.za.com",nocase; classtype:attempted-recon; sid:200013194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.tubvou.za.com",nocase; classtype:attempted-recon; sid:200013195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.uesuju.za.com",nocase; classtype:attempted-recon; sid:200013196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ugbucg.za.com",nocase; classtype:attempted-recon; sid:200013197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.uhtsna.za.com",nocase; classtype:attempted-recon; sid:200013198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ujngcg.za.com",nocase; classtype:attempted-recon; sid:200013199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.umfbax.za.com",nocase; classtype:attempted-recon; sid:200013200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.urycmw.za.com",nocase; classtype:attempted-recon; sid:200013201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.uumird.za.com",nocase; classtype:attempted-recon; sid:200013202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.uvowom.za.com",nocase; classtype:attempted-recon; sid:200013203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.vdobfv.za.com",nocase; classtype:attempted-recon; sid:200013204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.virtxq.za.com",nocase; classtype:attempted-recon; sid:200013205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.vjwefx.za.com",nocase; classtype:attempted-recon; sid:200013206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.vstcza.za.com",nocase; classtype:attempted-recon; sid:200013207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.vvapfd.za.com",nocase; classtype:attempted-recon; sid:200013208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.woddlo.za.com",nocase; classtype:attempted-recon; sid:200013209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.wposkr.za.com",nocase; classtype:attempted-recon; sid:200013210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.wstujx.za.com",nocase; classtype:attempted-recon; sid:200013211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.wvdxil.za.com",nocase; classtype:attempted-recon; sid:200013212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.wvpeyp.za.com",nocase; classtype:attempted-recon; sid:200013213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.wzqpee.za.com",nocase; classtype:attempted-recon; sid:200013214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.xbdhbi.za.com",nocase; classtype:attempted-recon; sid:200013215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.xkgblw.za.com",nocase; classtype:attempted-recon; sid:200013216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.xokvig.za.com",nocase; classtype:attempted-recon; sid:200013217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.xpyewd.za.com",nocase; classtype:attempted-recon; sid:200013218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.yfxcpy.za.com",nocase; classtype:attempted-recon; sid:200013219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.yilvza.za.com",nocase; classtype:attempted-recon; sid:200013220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ymewff.za.com",nocase; classtype:attempted-recon; sid:200013221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.ynuzpu.za.com",nocase; classtype:attempted-recon; sid:200013222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.yptwya.za.com",nocase; classtype:attempted-recon; sid:200013223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.yqszfl.za.com",nocase; classtype:attempted-recon; sid:200013224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.yvgrja.za.com",nocase; classtype:attempted-recon; sid:200013225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.yytmgo.za.com",nocase; classtype:attempted-recon; sid:200013226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.zcmgqp.za.com",nocase; classtype:attempted-recon; sid:200013227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.zfbgqn.za.com",nocase; classtype:attempted-recon; sid:200013228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.zgjlxb.za.com",nocase; classtype:attempted-recon; sid:200013229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.zsmfjr.za.com",nocase; classtype:attempted-recon; sid:200013230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnunresuzovvseon.visaczcsmeevsioriursi.zzwuas.za.com",nocase; classtype:attempted-recon; sid:200013231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.acdtum.za.com",nocase; classtype:attempted-recon; sid:200013232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.balvnd.za.com",nocase; classtype:attempted-recon; sid:200013233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.bbzbtx.za.com",nocase; classtype:attempted-recon; sid:200013234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.blrvdr.za.com",nocase; classtype:attempted-recon; sid:200013235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.blxztu.za.com",nocase; classtype:attempted-recon; sid:200013236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.bvjqmk.za.com",nocase; classtype:attempted-recon; sid:200013237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.cbwqrw.za.com",nocase; classtype:attempted-recon; sid:200013238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.cozlty.za.com",nocase; classtype:attempted-recon; sid:200013239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.cqqpsz.za.com",nocase; classtype:attempted-recon; sid:200013240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.cxwohm.za.com",nocase; classtype:attempted-recon; sid:200013241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.dbmdfr.za.com",nocase; classtype:attempted-recon; sid:200013242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.dfmiex.za.com",nocase; classtype:attempted-recon; sid:200013243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.fmkgao.za.com",nocase; classtype:attempted-recon; sid:200013244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.fonuba.za.com",nocase; classtype:attempted-recon; sid:200013245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.gedvrb.za.com",nocase; classtype:attempted-recon; sid:200013246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.gltlxm.za.com",nocase; classtype:attempted-recon; sid:200013247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.hjrhmw.za.com",nocase; classtype:attempted-recon; sid:200013248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.iowdcc.za.com",nocase; classtype:attempted-recon; sid:200013249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.jgdgat.za.com",nocase; classtype:attempted-recon; sid:200013250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.kaixbv.za.com",nocase; classtype:attempted-recon; sid:200013251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.koxgxs.za.com",nocase; classtype:attempted-recon; sid:200013252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.lcadhp.za.com",nocase; classtype:attempted-recon; sid:200013253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.lvbccr.za.com",nocase; classtype:attempted-recon; sid:200013254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.lvpxrb.za.com",nocase; classtype:attempted-recon; sid:200013255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.obeyjn.za.com",nocase; classtype:attempted-recon; sid:200013256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.odujie.za.com",nocase; classtype:attempted-recon; sid:200013257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.phkavb.za.com",nocase; classtype:attempted-recon; sid:200013258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.pqyvgi.za.com",nocase; classtype:attempted-recon; sid:200013259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.psicaz.za.com",nocase; classtype:attempted-recon; sid:200013260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.qmdgnc.za.com",nocase; classtype:attempted-recon; sid:200013261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.qsfxkv.za.com",nocase; classtype:attempted-recon; sid:200013262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.qzuuho.za.com",nocase; classtype:attempted-recon; sid:200013263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.rolbdo.za.com",nocase; classtype:attempted-recon; sid:200013264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.rqumqp.za.com",nocase; classtype:attempted-recon; sid:200013265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.sochye.za.com",nocase; classtype:attempted-recon; sid:200013266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.swhgkf.za.com",nocase; classtype:attempted-recon; sid:200013267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.tbtenr.za.com",nocase; classtype:attempted-recon; sid:200013268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.usrwro.za.com",nocase; classtype:attempted-recon; sid:200013269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.vckxwj.za.com",nocase; classtype:attempted-recon; sid:200013270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.vefkbx.za.com",nocase; classtype:attempted-recon; sid:200013271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.vndscu.za.com",nocase; classtype:attempted-recon; sid:200013272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.vowycz.za.com",nocase; classtype:attempted-recon; sid:200013273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.wmbipa.za.com",nocase; classtype:attempted-recon; sid:200013274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.wtkudd.za.com",nocase; classtype:attempted-recon; sid:200013275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.wyothk.za.com",nocase; classtype:attempted-recon; sid:200013276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.xmvpwm.za.com",nocase; classtype:attempted-recon; sid:200013277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.ybvvxi.za.com",nocase; classtype:attempted-recon; sid:200013278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiacnureszovvseon.visazcmeevsioriursi.yozdqk.za.com",nocase; classtype:attempted-recon; sid:200013279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.acdtum.za.com",nocase; classtype:attempted-recon; sid:200013280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.bbzbtx.za.com",nocase; classtype:attempted-recon; sid:200013281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.bgvjlj.za.com",nocase; classtype:attempted-recon; sid:200013282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.blacvp.za.com",nocase; classtype:attempted-recon; sid:200013283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.bnywlu.za.com",nocase; classtype:attempted-recon; sid:200013284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.bvjqmk.za.com",nocase; classtype:attempted-recon; sid:200013285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.cbwqrw.za.com",nocase; classtype:attempted-recon; sid:200013286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.cjimsd.za.com",nocase; classtype:attempted-recon; sid:200013287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.dbmdfr.za.com",nocase; classtype:attempted-recon; sid:200013288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.dfmiex.za.com",nocase; classtype:attempted-recon; sid:200013289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.gedvrb.za.com",nocase; classtype:attempted-recon; sid:200013290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.gggxpw.za.com",nocase; classtype:attempted-recon; sid:200013291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.hchaca.za.com",nocase; classtype:attempted-recon; sid:200013292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.iaoyzz.za.com",nocase; classtype:attempted-recon; sid:200013293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.irxdzy.za.com",nocase; classtype:attempted-recon; sid:200013294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.koxgxs.za.com",nocase; classtype:attempted-recon; sid:200013295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.kresvt.za.com",nocase; classtype:attempted-recon; sid:200013296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.lqtahv.za.com",nocase; classtype:attempted-recon; sid:200013297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.odujie.za.com",nocase; classtype:attempted-recon; sid:200013298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.pgqcnr.za.com",nocase; classtype:attempted-recon; sid:200013299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.phkavb.za.com",nocase; classtype:attempted-recon; sid:200013300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.pigrir.za.com",nocase; classtype:attempted-recon; sid:200013301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.qipwcl.za.com",nocase; classtype:attempted-recon; sid:200013302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.rolbdo.za.com",nocase; classtype:attempted-recon; sid:200013303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.rqumqp.za.com",nocase; classtype:attempted-recon; sid:200013304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.spsvre.za.com",nocase; classtype:attempted-recon; sid:200013305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.swhgkf.za.com",nocase; classtype:attempted-recon; sid:200013306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.szynbx.za.com",nocase; classtype:attempted-recon; sid:200013307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.tzzwdq.za.com",nocase; classtype:attempted-recon; sid:200013308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.uhzkns.za.com",nocase; classtype:attempted-recon; sid:200013309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.usrwro.za.com",nocase; classtype:attempted-recon; sid:200013310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.vckxwj.za.com",nocase; classtype:attempted-recon; sid:200013311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.vefkbx.za.com",nocase; classtype:attempted-recon; sid:200013312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.vndscu.za.com",nocase; classtype:attempted-recon; sid:200013313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.vowycz.za.com",nocase; classtype:attempted-recon; sid:200013314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.wmbipa.za.com",nocase; classtype:attempted-recon; sid:200013315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.xdjnuh.za.com",nocase; classtype:attempted-recon; sid:200013316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.xqjofw.za.com",nocase; classtype:attempted-recon; sid:200013317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.yozdqk.za.com",nocase; classtype:attempted-recon; sid:200013318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccaeoseon.visazcmiueeneainsi.ywsztl.za.com",nocase; classtype:attempted-recon; sid:200013319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.acysue.za.com",nocase; classtype:attempted-recon; sid:200013320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200013321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200013322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200013323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200013324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.airnja.za.com",nocase; classtype:attempted-recon; sid:200013325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200013326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200013327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200013328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200013329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200013330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200013331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.bangme.za.com",nocase; classtype:attempted-recon; sid:200013332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200013333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.befurr.za.com",nocase; classtype:attempted-recon; sid:200013334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200013335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200013336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200013337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200013338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200013339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200013340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200013341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200013342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200013343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200013344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200013345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200013346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200013347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200013348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200013349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200013350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200013351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200013352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200013353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200013354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200013355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200013356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200013357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200013358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200013359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200013360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200013361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200013362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200013363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200013364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200013365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200013366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200013367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200013368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200013369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200013370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200013371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200013372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200013373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.enksln.za.com",nocase; classtype:attempted-recon; sid:200013374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200013375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200013376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.equmej.za.com",nocase; classtype:attempted-recon; sid:200013377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200013378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200013379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200013380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200013381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200013382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200013383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200013384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200013385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200013386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200013387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.frroav.za.com",nocase; classtype:attempted-recon; sid:200013388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200013389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200013390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200013391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200013392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200013393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200013394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200013395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200013396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200013397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200013398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200013399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200013400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200013401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200013402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200013403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200013404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200013405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200013406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200013407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200013408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200013409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200013410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200013411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200013412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200013413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200013414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200013415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200013416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200013417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200013418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200013419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200013420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200013421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200013422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200013423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200013424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200013425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200013426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200013427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200013428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200013429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200013430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200013431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200013432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200013433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200013434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200013435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200013436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200013437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200013438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200013439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200013440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200013441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200013442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200013443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200013444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200013445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200013446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200013447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200013448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200013449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.laguer.za.com",nocase; classtype:attempted-recon; sid:200013450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200013451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200013452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200013453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200013454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200013455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200013456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200013457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200013458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200013459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200013460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200013461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.maivih.za.com",nocase; classtype:attempted-recon; sid:200013462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200013463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200013464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200013465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200013466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200013467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200013468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200013469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200013470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200013471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200013472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200013473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200013474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200013475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200013476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200013477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200013478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200013479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200013480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200013481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200013482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200013483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200013484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200013485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200013486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200013487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200013488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200013489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200013490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200013491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200013492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200013493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200013494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200013495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200013496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.oynnaf.za.com",nocase; classtype:attempted-recon; sid:200013497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ozgdvq.za.com",nocase; classtype:attempted-recon; sid:200013498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200013499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.pemrjn.za.com",nocase; classtype:attempted-recon; sid:200013500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.picwiy.za.com",nocase; classtype:attempted-recon; sid:200013501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.pkdobq.za.com",nocase; classtype:attempted-recon; sid:200013502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.poigwz.za.com",nocase; classtype:attempted-recon; sid:200013503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ppwmzt.za.com",nocase; classtype:attempted-recon; sid:200013504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.qcpjmm.za.com",nocase; classtype:attempted-recon; sid:200013505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.qfdotp.za.com",nocase; classtype:attempted-recon; sid:200013506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.qfrbez.za.com",nocase; classtype:attempted-recon; sid:200013507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.qgispn.za.com",nocase; classtype:attempted-recon; sid:200013508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.qvfwma.za.com",nocase; classtype:attempted-recon; sid:200013509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200013510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.reaqos.za.com",nocase; classtype:attempted-recon; sid:200013511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.rhfwsh.za.com",nocase; classtype:attempted-recon; sid:200013512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200013513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200013514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.rmpemt.za.com",nocase; classtype:attempted-recon; sid:200013515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.rmzoht.za.com",nocase; classtype:attempted-recon; sid:200013516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.roftae.za.com",nocase; classtype:attempted-recon; sid:200013517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.rpfjaz.za.com",nocase; classtype:attempted-recon; sid:200013518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.rplout.za.com",nocase; classtype:attempted-recon; sid:200013519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.rrajfi.za.com",nocase; classtype:attempted-recon; sid:200013520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.rsnklt.za.com",nocase; classtype:attempted-recon; sid:200013521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.rsuwkc.za.com",nocase; classtype:attempted-recon; sid:200013522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.rujjog.za.com",nocase; classtype:attempted-recon; sid:200013523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.rzkyqg.za.com",nocase; classtype:attempted-recon; sid:200013524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.snmrey.za.com",nocase; classtype:attempted-recon; sid:200013525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.sqmnsg.za.com",nocase; classtype:attempted-recon; sid:200013526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.sztsok.za.com",nocase; classtype:attempted-recon; sid:200013527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.tayped.za.com",nocase; classtype:attempted-recon; sid:200013528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.tcpzfk.za.com",nocase; classtype:attempted-recon; sid:200013529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200013530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.tfwvbz.za.com",nocase; classtype:attempted-recon; sid:200013531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.tipmxj.za.com",nocase; classtype:attempted-recon; sid:200013532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.tlvtct.za.com",nocase; classtype:attempted-recon; sid:200013533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.tubvou.za.com",nocase; classtype:attempted-recon; sid:200013534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.vjwefx.za.com",nocase; classtype:attempted-recon; sid:200013535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.vstcza.za.com",nocase; classtype:attempted-recon; sid:200013536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.vvapfd.za.com",nocase; classtype:attempted-recon; sid:200013537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.vwprmh.za.com",nocase; classtype:attempted-recon; sid:200013538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.wbuilk.za.com",nocase; classtype:attempted-recon; sid:200013539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.wdmxau.za.com",nocase; classtype:attempted-recon; sid:200013540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.woddlo.za.com",nocase; classtype:attempted-recon; sid:200013541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.wposkr.za.com",nocase; classtype:attempted-recon; sid:200013542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.wvdxil.za.com",nocase; classtype:attempted-recon; sid:200013543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.wvpeyp.za.com",nocase; classtype:attempted-recon; sid:200013544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.wzqpee.za.com",nocase; classtype:attempted-recon; sid:200013545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.wzrrqp.za.com",nocase; classtype:attempted-recon; sid:200013546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.xbdhbi.za.com",nocase; classtype:attempted-recon; sid:200013547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.xfwrde.za.com",nocase; classtype:attempted-recon; sid:200013548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.xkgblw.za.com",nocase; classtype:attempted-recon; sid:200013549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.xnbziz.za.com",nocase; classtype:attempted-recon; sid:200013550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.xokvig.za.com",nocase; classtype:attempted-recon; sid:200013551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.xpyewd.za.com",nocase; classtype:attempted-recon; sid:200013552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ybqjcs.za.com",nocase; classtype:attempted-recon; sid:200013553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.yfxcpy.za.com",nocase; classtype:attempted-recon; sid:200013554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ygekte.za.com",nocase; classtype:attempted-recon; sid:200013555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.yilvza.za.com",nocase; classtype:attempted-recon; sid:200013556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.ynuzpu.za.com",nocase; classtype:attempted-recon; sid:200013557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.yptwya.za.com",nocase; classtype:attempted-recon; sid:200013558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.yqszfl.za.com",nocase; classtype:attempted-recon; sid:200013559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.yvgrja.za.com",nocase; classtype:attempted-recon; sid:200013560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.yxzuhh.za.com",nocase; classtype:attempted-recon; sid:200013561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.yytmgo.za.com",nocase; classtype:attempted-recon; sid:200013562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.zckoua.za.com",nocase; classtype:attempted-recon; sid:200013563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.zcmgqp.za.com",nocase; classtype:attempted-recon; sid:200013564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.zfbgqn.za.com",nocase; classtype:attempted-recon; sid:200013565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.zgjlxb.za.com",nocase; classtype:attempted-recon; sid:200013566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.zlzusf.za.com",nocase; classtype:attempted-recon; sid:200013567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.zobtvb.za.com",nocase; classtype:attempted-recon; sid:200013568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaiccnaeouseon.visazcmicueseneainsi.zsmfjr.za.com",nocase; classtype:attempted-recon; sid:200013569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.acysue.za.com",nocase; classtype:attempted-recon; sid:200013570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200013571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200013572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200013573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200013574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.airnja.za.com",nocase; classtype:attempted-recon; sid:200013575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200013576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200013577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200013578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200013579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200013580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200013581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.bangme.za.com",nocase; classtype:attempted-recon; sid:200013582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200013583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.befurr.za.com",nocase; classtype:attempted-recon; sid:200013584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200013585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200013586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200013587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200013588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200013589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200013590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200013591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200013592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200013593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200013594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200013595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200013596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200013597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200013598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200013599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200013600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200013601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200013602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200013603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200013604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200013605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200013606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200013607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200013608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200013609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200013610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200013611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200013612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200013613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200013614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200013615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200013616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200013617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200013618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200013619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200013620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200013621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200013622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200013623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.enksln.za.com",nocase; classtype:attempted-recon; sid:200013624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200013625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200013626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.equmej.za.com",nocase; classtype:attempted-recon; sid:200013627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200013628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200013629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200013630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200013631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200013632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200013633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200013634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200013635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200013636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200013637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.frroav.za.com",nocase; classtype:attempted-recon; sid:200013638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200013639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200013640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200013641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200013642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200013643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200013644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200013645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200013646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200013647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200013648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200013649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200013650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200013651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200013652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200013653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200013654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200013655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200013656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200013657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200013658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200013659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200013660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200013661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200013662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200013663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200013664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200013665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200013666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200013667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200013668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200013669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200013670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200013671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200013672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200013673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200013674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200013675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200013676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200013677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200013678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200013679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200013680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200013681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200013682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200013683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200013684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200013685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200013686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200013687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200013688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200013689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200013690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200013691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200013692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200013693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200013694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200013695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200013696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200013697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200013698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200013699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.laguer.za.com",nocase; classtype:attempted-recon; sid:200013700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200013701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200013702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200013703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200013704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200013705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200013706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200013707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200013708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200013709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200013710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200013711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.maivih.za.com",nocase; classtype:attempted-recon; sid:200013712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200013713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200013714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200013715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200013716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200013717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200013718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200013719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200013720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200013721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200013722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200013723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200013724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200013725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200013726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200013727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200013728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200013729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200013730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200013731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200013732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200013733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200013734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200013735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200013736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200013737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200013738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200013739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200013740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200013741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200013742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200013743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200013744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200013745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200013746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.oynnaf.za.com",nocase; classtype:attempted-recon; sid:200013747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ozgdvq.za.com",nocase; classtype:attempted-recon; sid:200013748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.paivji.za.com",nocase; classtype:attempted-recon; sid:200013749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200013750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.pemrjn.za.com",nocase; classtype:attempted-recon; sid:200013751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.phkhrx.za.com",nocase; classtype:attempted-recon; sid:200013752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.picwiy.za.com",nocase; classtype:attempted-recon; sid:200013753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.pkdobq.za.com",nocase; classtype:attempted-recon; sid:200013754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.pksqpw.za.com",nocase; classtype:attempted-recon; sid:200013755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ppwmzt.za.com",nocase; classtype:attempted-recon; sid:200013756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.puzdqh.za.com",nocase; classtype:attempted-recon; sid:200013757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.pxqicu.za.com",nocase; classtype:attempted-recon; sid:200013758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.qcpjmm.za.com",nocase; classtype:attempted-recon; sid:200013759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.qfdotp.za.com",nocase; classtype:attempted-recon; sid:200013760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.qfrbez.za.com",nocase; classtype:attempted-recon; sid:200013761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.qgispn.za.com",nocase; classtype:attempted-recon; sid:200013762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.qphuso.za.com",nocase; classtype:attempted-recon; sid:200013763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.qvfwma.za.com",nocase; classtype:attempted-recon; sid:200013764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.qwnduy.za.com",nocase; classtype:attempted-recon; sid:200013765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200013766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.rclyhu.za.com",nocase; classtype:attempted-recon; sid:200013767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.reaqos.za.com",nocase; classtype:attempted-recon; sid:200013768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.rfqqga.za.com",nocase; classtype:attempted-recon; sid:200013769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200013770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200013771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.rmzoht.za.com",nocase; classtype:attempted-recon; sid:200013772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.roftae.za.com",nocase; classtype:attempted-recon; sid:200013773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.rooreg.za.com",nocase; classtype:attempted-recon; sid:200013774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.rplout.za.com",nocase; classtype:attempted-recon; sid:200013775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.rrajfi.za.com",nocase; classtype:attempted-recon; sid:200013776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.rsnklt.za.com",nocase; classtype:attempted-recon; sid:200013777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.rsuwkc.za.com",nocase; classtype:attempted-recon; sid:200013778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ryqtlk.za.com",nocase; classtype:attempted-recon; sid:200013779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.sjolxi.za.com",nocase; classtype:attempted-recon; sid:200013780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.sqmnsg.za.com",nocase; classtype:attempted-recon; sid:200013781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.srlqyc.za.com",nocase; classtype:attempted-recon; sid:200013782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.tayped.za.com",nocase; classtype:attempted-recon; sid:200013783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.tcpzfk.za.com",nocase; classtype:attempted-recon; sid:200013784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200013785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.tfpdde.za.com",nocase; classtype:attempted-recon; sid:200013786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.tipmxj.za.com",nocase; classtype:attempted-recon; sid:200013787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.tlxfsd.za.com",nocase; classtype:attempted-recon; sid:200013788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.tmybve.za.com",nocase; classtype:attempted-recon; sid:200013789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.twozdd.za.com",nocase; classtype:attempted-recon; sid:200013790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ufrjqp.za.com",nocase; classtype:attempted-recon; sid:200013791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.uhuhey.za.com",nocase; classtype:attempted-recon; sid:200013792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.uiiavd.za.com",nocase; classtype:attempted-recon; sid:200013793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ujngcg.za.com",nocase; classtype:attempted-recon; sid:200013794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.umfbax.za.com",nocase; classtype:attempted-recon; sid:200013795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.urycmw.za.com",nocase; classtype:attempted-recon; sid:200013796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.utaekx.za.com",nocase; classtype:attempted-recon; sid:200013797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.uumird.za.com",nocase; classtype:attempted-recon; sid:200013798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.uvowom.za.com",nocase; classtype:attempted-recon; sid:200013799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.vbwfva.za.com",nocase; classtype:attempted-recon; sid:200013800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.vdobfv.za.com",nocase; classtype:attempted-recon; sid:200013801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.vjwefx.za.com",nocase; classtype:attempted-recon; sid:200013802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.vvapfd.za.com",nocase; classtype:attempted-recon; sid:200013803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.vwprmh.za.com",nocase; classtype:attempted-recon; sid:200013804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.wbuilk.za.com",nocase; classtype:attempted-recon; sid:200013805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.woddlo.za.com",nocase; classtype:attempted-recon; sid:200013806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.wposkr.za.com",nocase; classtype:attempted-recon; sid:200013807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.wstujx.za.com",nocase; classtype:attempted-recon; sid:200013808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.wvpeyp.za.com",nocase; classtype:attempted-recon; sid:200013809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.wzqpee.za.com",nocase; classtype:attempted-recon; sid:200013810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.xbdhbi.za.com",nocase; classtype:attempted-recon; sid:200013811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.xfwrde.za.com",nocase; classtype:attempted-recon; sid:200013812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.xnbziz.za.com",nocase; classtype:attempted-recon; sid:200013813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.xokvig.za.com",nocase; classtype:attempted-recon; sid:200013814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.xpyewd.za.com",nocase; classtype:attempted-recon; sid:200013815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.ybqjcs.za.com",nocase; classtype:attempted-recon; sid:200013816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnnureuovvseon.visazccesvsioriursi.zsmfjr.za.com",nocase; classtype:attempted-recon; sid:200013817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.adoukk.za.com",nocase; classtype:attempted-recon; sid:200013818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.akfmmu.za.com",nocase; classtype:attempted-recon; sid:200013819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.balvnd.za.com",nocase; classtype:attempted-recon; sid:200013820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.bgvjlj.za.com",nocase; classtype:attempted-recon; sid:200013821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.blrvdr.za.com",nocase; classtype:attempted-recon; sid:200013822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.bnywlu.za.com",nocase; classtype:attempted-recon; sid:200013823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.cjimsd.za.com",nocase; classtype:attempted-recon; sid:200013824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.cozlty.za.com",nocase; classtype:attempted-recon; sid:200013825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.cqqpsz.za.com",nocase; classtype:attempted-recon; sid:200013826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.cxwohm.za.com",nocase; classtype:attempted-recon; sid:200013827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.emiduh.za.com",nocase; classtype:attempted-recon; sid:200013828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.fonuba.za.com",nocase; classtype:attempted-recon; sid:200013829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.geoqun.za.com",nocase; classtype:attempted-recon; sid:200013830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.gggxpw.za.com",nocase; classtype:attempted-recon; sid:200013831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.gltlxm.za.com",nocase; classtype:attempted-recon; sid:200013832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.gzauog.za.com",nocase; classtype:attempted-recon; sid:200013833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.hchaca.za.com",nocase; classtype:attempted-recon; sid:200013834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.hyxhne.za.com",nocase; classtype:attempted-recon; sid:200013835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.irxdzy.za.com",nocase; classtype:attempted-recon; sid:200013836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.jrvbcm.za.com",nocase; classtype:attempted-recon; sid:200013837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.jwnhul.za.com",nocase; classtype:attempted-recon; sid:200013838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.kaixbv.za.com",nocase; classtype:attempted-recon; sid:200013839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.koxgxs.za.com",nocase; classtype:attempted-recon; sid:200013840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.lvbccr.za.com",nocase; classtype:attempted-recon; sid:200013841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.lvpxrb.za.com",nocase; classtype:attempted-recon; sid:200013842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.piahby.za.com",nocase; classtype:attempted-recon; sid:200013843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.psicaz.za.com",nocase; classtype:attempted-recon; sid:200013844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.qipwcl.za.com",nocase; classtype:attempted-recon; sid:200013845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.qsfxkv.za.com",nocase; classtype:attempted-recon; sid:200013846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.qthyus.za.com",nocase; classtype:attempted-recon; sid:200013847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.qzuuho.za.com",nocase; classtype:attempted-recon; sid:200013848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.rqumqp.za.com",nocase; classtype:attempted-recon; sid:200013849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.spsvre.za.com",nocase; classtype:attempted-recon; sid:200013850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.swhgkf.za.com",nocase; classtype:attempted-recon; sid:200013851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.tbtenr.za.com",nocase; classtype:attempted-recon; sid:200013852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.usoqts.za.com",nocase; classtype:attempted-recon; sid:200013853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.vckxwj.za.com",nocase; classtype:attempted-recon; sid:200013854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.vefkbx.za.com",nocase; classtype:attempted-recon; sid:200013855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.vlqgmb.za.com",nocase; classtype:attempted-recon; sid:200013856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.vndscu.za.com",nocase; classtype:attempted-recon; sid:200013857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.vowycz.za.com",nocase; classtype:attempted-recon; sid:200013858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.wmbipa.za.com",nocase; classtype:attempted-recon; sid:200013859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaicnureovvseon.visazceenevsioriursi.xqjofw.za.com",nocase; classtype:attempted-recon; sid:200013860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.acysue.za.com",nocase; classtype:attempted-recon; sid:200013861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200013862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200013863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200013864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200013865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.airnja.za.com",nocase; classtype:attempted-recon; sid:200013866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200013867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200013868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200013869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200013870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200013871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200013872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.bangme.za.com",nocase; classtype:attempted-recon; sid:200013873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200013874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.befurr.za.com",nocase; classtype:attempted-recon; sid:200013875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200013876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200013877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200013878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200013879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200013880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200013881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200013882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200013883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200013884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200013885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200013886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200013887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200013888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200013889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200013890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200013891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200013892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200013893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200013894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200013895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200013896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200013897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200013898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200013899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200013900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200013901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200013902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200013903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200013904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200013905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200013906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200013907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200013908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200013909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200013910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200013911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200013912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200013913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200013914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.enksln.za.com",nocase; classtype:attempted-recon; sid:200013915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200013916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200013917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.equmej.za.com",nocase; classtype:attempted-recon; sid:200013918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200013919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200013920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200013921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200013922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200013923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200013924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200013925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200013926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200013927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200013928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.frroav.za.com",nocase; classtype:attempted-recon; sid:200013929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200013930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200013931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200013932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200013933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200013934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200013935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200013936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200013937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200013938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200013939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200013940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200013941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200013942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200013943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200013944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200013945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200013946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200013947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200013948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200013949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200013950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200013951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200013952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200013953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200013954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200013955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200013956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200013957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200013958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200013959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200013960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200013961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200013962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200013963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200013964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200013965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200013966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200013967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200013968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200013969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200013970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200013971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200013972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200013973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200013974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200013975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200013976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200013977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200013978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200013979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200013980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200013981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200013982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200013983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200013984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200013985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200013986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200013987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200013988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200013989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200013990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.laguer.za.com",nocase; classtype:attempted-recon; sid:200013991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200013992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200013993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200013994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200013995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200013996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200013997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200013998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200013999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200014000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200014001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200014002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.maivih.za.com",nocase; classtype:attempted-recon; sid:200014003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200014004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200014005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200014006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200014007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200014008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200014009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200014010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200014011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200014012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200014013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200014014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200014015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200014016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200014017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200014018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200014019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200014020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200014021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200014022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200014023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200014024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200014025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200014026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200014027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200014028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200014029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200014030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200014031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200014032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200014033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200014034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200014035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200014036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200014037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ozgdvq.za.com",nocase; classtype:attempted-recon; sid:200014038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.paivji.za.com",nocase; classtype:attempted-recon; sid:200014039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200014040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.pemrjn.za.com",nocase; classtype:attempted-recon; sid:200014041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.phkhrx.za.com",nocase; classtype:attempted-recon; sid:200014042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.picwiy.za.com",nocase; classtype:attempted-recon; sid:200014043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.pivwti.za.com",nocase; classtype:attempted-recon; sid:200014044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ppwmzt.za.com",nocase; classtype:attempted-recon; sid:200014045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.puzdqh.za.com",nocase; classtype:attempted-recon; sid:200014046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.pvrmnc.za.com",nocase; classtype:attempted-recon; sid:200014047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.qcpjmm.za.com",nocase; classtype:attempted-recon; sid:200014048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.qdwepk.za.com",nocase; classtype:attempted-recon; sid:200014049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.qfrbez.za.com",nocase; classtype:attempted-recon; sid:200014050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.qgispn.za.com",nocase; classtype:attempted-recon; sid:200014051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.qphuso.za.com",nocase; classtype:attempted-recon; sid:200014052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.qvfwma.za.com",nocase; classtype:attempted-recon; sid:200014053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.qwnduy.za.com",nocase; classtype:attempted-recon; sid:200014054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200014055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.rclyhu.za.com",nocase; classtype:attempted-recon; sid:200014056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.rfqqga.za.com",nocase; classtype:attempted-recon; sid:200014057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.rhfwsh.za.com",nocase; classtype:attempted-recon; sid:200014058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200014059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200014060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.rmpemt.za.com",nocase; classtype:attempted-recon; sid:200014061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.rooreg.za.com",nocase; classtype:attempted-recon; sid:200014062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.rplout.za.com",nocase; classtype:attempted-recon; sid:200014063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.rsnklt.za.com",nocase; classtype:attempted-recon; sid:200014064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ryqtlk.za.com",nocase; classtype:attempted-recon; sid:200014065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.rzkyqg.za.com",nocase; classtype:attempted-recon; sid:200014066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.ujngcg.za.com",nocase; classtype:attempted-recon; sid:200014067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.umfbax.za.com",nocase; classtype:attempted-recon; sid:200014068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.uopoem.za.com",nocase; classtype:attempted-recon; sid:200014069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.urcrba.za.com",nocase; classtype:attempted-recon; sid:200014070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.urycmw.za.com",nocase; classtype:attempted-recon; sid:200014071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.uumird.za.com",nocase; classtype:attempted-recon; sid:200014072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.uvowom.za.com",nocase; classtype:attempted-recon; sid:200014073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.uyyfoa.za.com",nocase; classtype:attempted-recon; sid:200014074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.vdobfv.za.com",nocase; classtype:attempted-recon; sid:200014075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.virtxq.za.com",nocase; classtype:attempted-recon; sid:200014076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.wzqpee.za.com",nocase; classtype:attempted-recon; sid:200014077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.xfwrde.za.com",nocase; classtype:attempted-recon; sid:200014078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.xkgblw.za.com",nocase; classtype:attempted-recon; sid:200014079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.xnbziz.za.com",nocase; classtype:attempted-recon; sid:200014080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.xokvig.za.com",nocase; classtype:attempted-recon; sid:200014081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.yfxcpy.za.com",nocase; classtype:attempted-recon; sid:200014082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.yilvza.za.com",nocase; classtype:attempted-recon; sid:200014083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.yqszfl.za.com",nocase; classtype:attempted-recon; sid:200014084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.yxzuhh.za.com",nocase; classtype:attempted-recon; sid:200014085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.yytmgo.za.com",nocase; classtype:attempted-recon; sid:200014086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.zckoua.za.com",nocase; classtype:attempted-recon; sid:200014087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.zgjlxb.za.com",nocase; classtype:attempted-recon; sid:200014088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.zlzusf.za.com",nocase; classtype:attempted-recon; sid:200014089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.zobtvb.za.com",nocase; classtype:attempted-recon; sid:200014090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivanureuszovvseon.vsecnaszcmevsioriursi.zrsgyv.za.com",nocase; classtype:attempted-recon; sid:200014091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.acysue.za.com",nocase; classtype:attempted-recon; sid:200014092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200014093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200014094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200014095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200014096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.airnja.za.com",nocase; classtype:attempted-recon; sid:200014097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200014098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200014099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200014100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200014101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200014102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200014103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.bangme.za.com",nocase; classtype:attempted-recon; sid:200014104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200014105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.befurr.za.com",nocase; classtype:attempted-recon; sid:200014106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200014107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200014108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200014109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200014110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200014111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200014112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200014113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200014114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200014115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200014116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200014117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200014118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200014119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200014120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200014121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200014122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200014123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200014124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200014125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200014126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200014127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200014128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200014129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200014130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200014131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200014132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200014133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200014134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200014135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200014136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200014137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200014138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200014139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200014140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200014141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200014142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200014143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200014144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200014145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.enksln.za.com",nocase; classtype:attempted-recon; sid:200014146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200014147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200014148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.equmej.za.com",nocase; classtype:attempted-recon; sid:200014149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200014150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200014151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200014152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200014153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200014154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200014155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200014156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200014157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200014158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200014159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.frroav.za.com",nocase; classtype:attempted-recon; sid:200014160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200014161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200014162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200014163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200014164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200014165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200014166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200014167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200014168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200014169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200014170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200014171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200014172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200014173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200014174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200014175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200014176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200014177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200014178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200014179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200014180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200014181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200014182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200014183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200014184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200014185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200014186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200014187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200014188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200014189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200014190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200014191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200014192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200014193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200014194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200014195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200014196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200014197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200014198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200014199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200014200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200014201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200014202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200014203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200014204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200014205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200014206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200014207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200014208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200014209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200014210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200014211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200014212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200014213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200014214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200014215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200014216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200014217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200014218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200014219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200014220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200014221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.laguer.za.com",nocase; classtype:attempted-recon; sid:200014222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200014223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200014224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200014225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200014226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200014227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200014228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200014229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200014230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200014231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200014232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200014233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.maivih.za.com",nocase; classtype:attempted-recon; sid:200014234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200014235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200014236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200014237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200014238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200014239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200014240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200014241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200014242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200014243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200014244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200014245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200014246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200014247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200014248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200014249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200014250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200014251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200014252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200014253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200014254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200014255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200014256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200014257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200014258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200014259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200014260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200014261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200014262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200014263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200014264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200014265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200014266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200014267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200014268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.oynnaf.za.com",nocase; classtype:attempted-recon; sid:200014269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ozgdvq.za.com",nocase; classtype:attempted-recon; sid:200014270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.paivji.za.com",nocase; classtype:attempted-recon; sid:200014271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200014272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.pkdobq.za.com",nocase; classtype:attempted-recon; sid:200014273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ppwmzt.za.com",nocase; classtype:attempted-recon; sid:200014274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.puzdqh.za.com",nocase; classtype:attempted-recon; sid:200014275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.pvrmnc.za.com",nocase; classtype:attempted-recon; sid:200014276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.qcpjmm.za.com",nocase; classtype:attempted-recon; sid:200014277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.qdwepk.za.com",nocase; classtype:attempted-recon; sid:200014278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.qfbzop.za.com",nocase; classtype:attempted-recon; sid:200014279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.qfdotp.za.com",nocase; classtype:attempted-recon; sid:200014280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.qfrbez.za.com",nocase; classtype:attempted-recon; sid:200014281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.qgispn.za.com",nocase; classtype:attempted-recon; sid:200014282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.qphuso.za.com",nocase; classtype:attempted-recon; sid:200014283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.rclyhu.za.com",nocase; classtype:attempted-recon; sid:200014284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.rhbvvz.za.com",nocase; classtype:attempted-recon; sid:200014285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.rhfwsh.za.com",nocase; classtype:attempted-recon; sid:200014286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200014287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200014288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.rmpemt.za.com",nocase; classtype:attempted-recon; sid:200014289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.rmzoht.za.com",nocase; classtype:attempted-recon; sid:200014290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.roftae.za.com",nocase; classtype:attempted-recon; sid:200014291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.rpfjaz.za.com",nocase; classtype:attempted-recon; sid:200014292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200014293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.tfpdde.za.com",nocase; classtype:attempted-recon; sid:200014294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.tipmxj.za.com",nocase; classtype:attempted-recon; sid:200014295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.tmybve.za.com",nocase; classtype:attempted-recon; sid:200014296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.tubvou.za.com",nocase; classtype:attempted-recon; sid:200014297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.twbvyf.za.com",nocase; classtype:attempted-recon; sid:200014298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.twozdd.za.com",nocase; classtype:attempted-recon; sid:200014299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.tztcbk.za.com",nocase; classtype:attempted-recon; sid:200014300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ugbucg.za.com",nocase; classtype:attempted-recon; sid:200014301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.uiiavd.za.com",nocase; classtype:attempted-recon; sid:200014302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.umfbax.za.com",nocase; classtype:attempted-recon; sid:200014303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.urcrba.za.com",nocase; classtype:attempted-recon; sid:200014304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.uumird.za.com",nocase; classtype:attempted-recon; sid:200014305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.vbwfva.za.com",nocase; classtype:attempted-recon; sid:200014306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.virtxq.za.com",nocase; classtype:attempted-recon; sid:200014307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.vjwefx.za.com",nocase; classtype:attempted-recon; sid:200014308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.vstcza.za.com",nocase; classtype:attempted-recon; sid:200014309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.vvapfd.za.com",nocase; classtype:attempted-recon; sid:200014310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.whbfgy.za.com",nocase; classtype:attempted-recon; sid:200014311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.woddlo.za.com",nocase; classtype:attempted-recon; sid:200014312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.wposkr.za.com",nocase; classtype:attempted-recon; sid:200014313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.wstujx.za.com",nocase; classtype:attempted-recon; sid:200014314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.wzqpee.za.com",nocase; classtype:attempted-recon; sid:200014315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.xbdhbi.za.com",nocase; classtype:attempted-recon; sid:200014316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.xfwrde.za.com",nocase; classtype:attempted-recon; sid:200014317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.xnbziz.za.com",nocase; classtype:attempted-recon; sid:200014318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.xokvig.za.com",nocase; classtype:attempted-recon; sid:200014319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.ybqjcs.za.com",nocase; classtype:attempted-recon; sid:200014320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.yilvza.za.com",nocase; classtype:attempted-recon; sid:200014321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.yqszfl.za.com",nocase; classtype:attempted-recon; sid:200014322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.yxzuhh.za.com",nocase; classtype:attempted-recon; sid:200014323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.yytmgo.za.com",nocase; classtype:attempted-recon; sid:200014324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.zckoua.za.com",nocase; classtype:attempted-recon; sid:200014325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.zcmgqp.za.com",nocase; classtype:attempted-recon; sid:200014326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.zfbgqn.za.com",nocase; classtype:attempted-recon; sid:200014327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.zgjlxb.za.com",nocase; classtype:attempted-recon; sid:200014328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.zobtvb.za.com",nocase; classtype:attempted-recon; sid:200014329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.zrsgyv.za.com",nocase; classtype:attempted-recon; sid:200014330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.zsmfjr.za.com",nocase; classtype:attempted-recon; sid:200014331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivinsoauaeovvseon.viscacsenmiureainsi.zznany.za.com",nocase; classtype:attempted-recon; sid:200014332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.adoukk.za.com",nocase; classtype:attempted-recon; sid:200014333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.akfmmu.za.com",nocase; classtype:attempted-recon; sid:200014334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.bbzbtx.za.com",nocase; classtype:attempted-recon; sid:200014335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.blacvp.za.com",nocase; classtype:attempted-recon; sid:200014336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.blxztu.za.com",nocase; classtype:attempted-recon; sid:200014337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.bvjqmk.za.com",nocase; classtype:attempted-recon; sid:200014338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.cbwqrw.za.com",nocase; classtype:attempted-recon; sid:200014339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.cozlty.za.com",nocase; classtype:attempted-recon; sid:200014340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.cqqpsz.za.com",nocase; classtype:attempted-recon; sid:200014341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.cxwohm.za.com",nocase; classtype:attempted-recon; sid:200014342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.dbmdfr.za.com",nocase; classtype:attempted-recon; sid:200014343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.dfmiex.za.com",nocase; classtype:attempted-recon; sid:200014344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.emiduh.za.com",nocase; classtype:attempted-recon; sid:200014345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.fmkgao.za.com",nocase; classtype:attempted-recon; sid:200014346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.hutqex.za.com",nocase; classtype:attempted-recon; sid:200014347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.hyxhne.za.com",nocase; classtype:attempted-recon; sid:200014348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.iaoyzz.za.com",nocase; classtype:attempted-recon; sid:200014349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.ipqbiq.za.com",nocase; classtype:attempted-recon; sid:200014350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.irxdzy.za.com",nocase; classtype:attempted-recon; sid:200014351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.joetyi.za.com",nocase; classtype:attempted-recon; sid:200014352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.jwnhul.za.com",nocase; classtype:attempted-recon; sid:200014353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.kaixbv.za.com",nocase; classtype:attempted-recon; sid:200014354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.koxgxs.za.com",nocase; classtype:attempted-recon; sid:200014355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.lvbccr.za.com",nocase; classtype:attempted-recon; sid:200014356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.lvpxrb.za.com",nocase; classtype:attempted-recon; sid:200014357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.mcxugn.za.com",nocase; classtype:attempted-recon; sid:200014358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.nxdsar.za.com",nocase; classtype:attempted-recon; sid:200014359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.obeyjn.za.com",nocase; classtype:attempted-recon; sid:200014360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.oeayuk.za.com",nocase; classtype:attempted-recon; sid:200014361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.oplxoj.za.com",nocase; classtype:attempted-recon; sid:200014362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.pgqcnr.za.com",nocase; classtype:attempted-recon; sid:200014363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.phkavb.za.com",nocase; classtype:attempted-recon; sid:200014364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.pigrir.za.com",nocase; classtype:attempted-recon; sid:200014365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.pqyvgi.za.com",nocase; classtype:attempted-recon; sid:200014366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.psicaz.za.com",nocase; classtype:attempted-recon; sid:200014367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.qipwcl.za.com",nocase; classtype:attempted-recon; sid:200014368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.qmdgnc.za.com",nocase; classtype:attempted-recon; sid:200014369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.rolbdo.za.com",nocase; classtype:attempted-recon; sid:200014370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.spsvre.za.com",nocase; classtype:attempted-recon; sid:200014371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.szynbx.za.com",nocase; classtype:attempted-recon; sid:200014372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.tbtenr.za.com",nocase; classtype:attempted-recon; sid:200014373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.tzzwdq.za.com",nocase; classtype:attempted-recon; sid:200014374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.usoqts.za.com",nocase; classtype:attempted-recon; sid:200014375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.usrwro.za.com",nocase; classtype:attempted-recon; sid:200014376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.vlqgmb.za.com",nocase; classtype:attempted-recon; sid:200014377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.vowycz.za.com",nocase; classtype:attempted-recon; sid:200014378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.wmbipa.za.com",nocase; classtype:attempted-recon; sid:200014379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.wtkudd.za.com",nocase; classtype:attempted-recon; sid:200014380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.xdjnuh.za.com",nocase; classtype:attempted-recon; sid:200014381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.xmvpwm.za.com",nocase; classtype:attempted-recon; sid:200014382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.xqjofw.za.com",nocase; classtype:attempted-recon; sid:200014383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.ybvvxi.za.com",nocase; classtype:attempted-recon; sid:200014384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.yozdqk.za.com",nocase; classtype:attempted-recon; sid:200014385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.ypapkj.za.com",nocase; classtype:attempted-recon; sid:200014386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovseon.visazienureeinsi.ytpxmu.za.com",nocase; classtype:attempted-recon; sid:200014387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.adoukk.za.com",nocase; classtype:attempted-recon; sid:200014388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.akfmmu.za.com",nocase; classtype:attempted-recon; sid:200014389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.bbzbtx.za.com",nocase; classtype:attempted-recon; sid:200014390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.blrvdr.za.com",nocase; classtype:attempted-recon; sid:200014391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.blxztu.za.com",nocase; classtype:attempted-recon; sid:200014392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.bnywlu.za.com",nocase; classtype:attempted-recon; sid:200014393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.cjimsd.za.com",nocase; classtype:attempted-recon; sid:200014394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.cozlty.za.com",nocase; classtype:attempted-recon; sid:200014395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.cqqpsz.za.com",nocase; classtype:attempted-recon; sid:200014396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.cxwohm.za.com",nocase; classtype:attempted-recon; sid:200014397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.dbmdfr.za.com",nocase; classtype:attempted-recon; sid:200014398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.dfmiex.za.com",nocase; classtype:attempted-recon; sid:200014399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.dvqcit.za.com",nocase; classtype:attempted-recon; sid:200014400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.fonuba.za.com",nocase; classtype:attempted-recon; sid:200014401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.geoqun.za.com",nocase; classtype:attempted-recon; sid:200014402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.gltlxm.za.com",nocase; classtype:attempted-recon; sid:200014403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.hxxrxy.za.com",nocase; classtype:attempted-recon; sid:200014404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.hyxhne.za.com",nocase; classtype:attempted-recon; sid:200014405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.iowdcc.za.com",nocase; classtype:attempted-recon; sid:200014406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.ipqbiq.za.com",nocase; classtype:attempted-recon; sid:200014407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.irpccg.za.com",nocase; classtype:attempted-recon; sid:200014408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.irxdzy.za.com",nocase; classtype:attempted-recon; sid:200014409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.joetyi.za.com",nocase; classtype:attempted-recon; sid:200014410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.jrvbcm.za.com",nocase; classtype:attempted-recon; sid:200014411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.jwnhul.za.com",nocase; classtype:attempted-recon; sid:200014412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.kaixbv.za.com",nocase; classtype:attempted-recon; sid:200014413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.koxgxs.za.com",nocase; classtype:attempted-recon; sid:200014414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.kresvt.za.com",nocase; classtype:attempted-recon; sid:200014415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.lvbccr.za.com",nocase; classtype:attempted-recon; sid:200014416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.oeayuk.za.com",nocase; classtype:attempted-recon; sid:200014417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.olycnz.za.com",nocase; classtype:attempted-recon; sid:200014418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.pgqcnr.za.com",nocase; classtype:attempted-recon; sid:200014419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.phkavb.za.com",nocase; classtype:attempted-recon; sid:200014420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.psicaz.za.com",nocase; classtype:attempted-recon; sid:200014421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.qipwcl.za.com",nocase; classtype:attempted-recon; sid:200014422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.qmdgnc.za.com",nocase; classtype:attempted-recon; sid:200014423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.qsfxkv.za.com",nocase; classtype:attempted-recon; sid:200014424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.qthyus.za.com",nocase; classtype:attempted-recon; sid:200014425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.rolbdo.za.com",nocase; classtype:attempted-recon; sid:200014426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.sochye.za.com",nocase; classtype:attempted-recon; sid:200014427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.tzzwdq.za.com",nocase; classtype:attempted-recon; sid:200014428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.usoqts.za.com",nocase; classtype:attempted-recon; sid:200014429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.usrwro.za.com",nocase; classtype:attempted-recon; sid:200014430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.vckxwj.za.com",nocase; classtype:attempted-recon; sid:200014431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.vowycz.za.com",nocase; classtype:attempted-recon; sid:200014432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.wmbipa.za.com",nocase; classtype:attempted-recon; sid:200014433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.ycgkkz.za.com",nocase; classtype:attempted-recon; sid:200014434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.yozdqk.za.com",nocase; classtype:attempted-recon; sid:200014435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.ypapkj.za.com",nocase; classtype:attempted-recon; sid:200014436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaaeovvseon.visacenmiureainsi.ywsztl.za.com",nocase; classtype:attempted-recon; sid:200014437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.acdtum.za.com",nocase; classtype:attempted-recon; sid:200014438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.balvnd.za.com",nocase; classtype:attempted-recon; sid:200014439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.bbzbtx.za.com",nocase; classtype:attempted-recon; sid:200014440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.blacvp.za.com",nocase; classtype:attempted-recon; sid:200014441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.blrvdr.za.com",nocase; classtype:attempted-recon; sid:200014442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.bvjqmk.za.com",nocase; classtype:attempted-recon; sid:200014443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.cozlty.za.com",nocase; classtype:attempted-recon; sid:200014444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.cqqpsz.za.com",nocase; classtype:attempted-recon; sid:200014445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.cxwohm.za.com",nocase; classtype:attempted-recon; sid:200014446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.dbmdfr.za.com",nocase; classtype:attempted-recon; sid:200014447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.dvqcit.za.com",nocase; classtype:attempted-recon; sid:200014448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.emiduh.za.com",nocase; classtype:attempted-recon; sid:200014449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.fmkgao.za.com",nocase; classtype:attempted-recon; sid:200014450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.geoqun.za.com",nocase; classtype:attempted-recon; sid:200014451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.gggxpw.za.com",nocase; classtype:attempted-recon; sid:200014452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.gltlxm.za.com",nocase; classtype:attempted-recon; sid:200014453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.gzauog.za.com",nocase; classtype:attempted-recon; sid:200014454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.hchaca.za.com",nocase; classtype:attempted-recon; sid:200014455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.hjrhmw.za.com",nocase; classtype:attempted-recon; sid:200014456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.ijpawu.za.com",nocase; classtype:attempted-recon; sid:200014457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.iowdcc.za.com",nocase; classtype:attempted-recon; sid:200014458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.ipqbiq.za.com",nocase; classtype:attempted-recon; sid:200014459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.irpccg.za.com",nocase; classtype:attempted-recon; sid:200014460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.irxdzy.za.com",nocase; classtype:attempted-recon; sid:200014461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.jgdgat.za.com",nocase; classtype:attempted-recon; sid:200014462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.joetyi.za.com",nocase; classtype:attempted-recon; sid:200014463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.jrvbcm.za.com",nocase; classtype:attempted-recon; sid:200014464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.jwnhul.za.com",nocase; classtype:attempted-recon; sid:200014465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.koxgxs.za.com",nocase; classtype:attempted-recon; sid:200014466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.kresvt.za.com",nocase; classtype:attempted-recon; sid:200014467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.lcadhp.za.com",nocase; classtype:attempted-recon; sid:200014468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.lqtahv.za.com",nocase; classtype:attempted-recon; sid:200014469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.lquolu.za.com",nocase; classtype:attempted-recon; sid:200014470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.lvbccr.za.com",nocase; classtype:attempted-recon; sid:200014471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.lvpxrb.za.com",nocase; classtype:attempted-recon; sid:200014472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.mcxugn.za.com",nocase; classtype:attempted-recon; sid:200014473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.nxdsar.za.com",nocase; classtype:attempted-recon; sid:200014474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.obeyjn.za.com",nocase; classtype:attempted-recon; sid:200014475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.oeayuk.za.com",nocase; classtype:attempted-recon; sid:200014476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.oplxoj.za.com",nocase; classtype:attempted-recon; sid:200014477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.qmdgnc.za.com",nocase; classtype:attempted-recon; sid:200014478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.qsfxkv.za.com",nocase; classtype:attempted-recon; sid:200014479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.qthyus.za.com",nocase; classtype:attempted-recon; sid:200014480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.qzuuho.za.com",nocase; classtype:attempted-recon; sid:200014481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.rolbdo.za.com",nocase; classtype:attempted-recon; sid:200014482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.rtwmgc.za.com",nocase; classtype:attempted-recon; sid:200014483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.sochye.za.com",nocase; classtype:attempted-recon; sid:200014484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.spsvre.za.com",nocase; classtype:attempted-recon; sid:200014485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.szynbx.za.com",nocase; classtype:attempted-recon; sid:200014486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.tzzwdq.za.com",nocase; classtype:attempted-recon; sid:200014487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.vckxwj.za.com",nocase; classtype:attempted-recon; sid:200014488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.vlqgmb.za.com",nocase; classtype:attempted-recon; sid:200014489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.vowycz.za.com",nocase; classtype:attempted-recon; sid:200014490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.wmbipa.za.com",nocase; classtype:attempted-recon; sid:200014491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.wyothk.za.com",nocase; classtype:attempted-recon; sid:200014492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.xqjofw.za.com",nocase; classtype:attempted-recon; sid:200014493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.ybvvxi.za.com",nocase; classtype:attempted-recon; sid:200014494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.ymsvdh.za.com",nocase; classtype:attempted-recon; sid:200014495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcesioriursi.ypapkj.za.com",nocase; classtype:attempted-recon; sid:200014496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.akfmmu.za.com",nocase; classtype:attempted-recon; sid:200014497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.balvnd.za.com",nocase; classtype:attempted-recon; sid:200014498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.bbzbtx.za.com",nocase; classtype:attempted-recon; sid:200014499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.bgvjlj.za.com",nocase; classtype:attempted-recon; sid:200014500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.blxztu.za.com",nocase; classtype:attempted-recon; sid:200014501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.bnrpkz.za.com",nocase; classtype:attempted-recon; sid:200014502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.bnywlu.za.com",nocase; classtype:attempted-recon; sid:200014503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.bvjqmk.za.com",nocase; classtype:attempted-recon; sid:200014504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.cbwqrw.za.com",nocase; classtype:attempted-recon; sid:200014505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.cozlty.za.com",nocase; classtype:attempted-recon; sid:200014506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.dbmdfr.za.com",nocase; classtype:attempted-recon; sid:200014507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.dvqcit.za.com",nocase; classtype:attempted-recon; sid:200014508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.emiduh.za.com",nocase; classtype:attempted-recon; sid:200014509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.fonuba.za.com",nocase; classtype:attempted-recon; sid:200014510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.gltlxm.za.com",nocase; classtype:attempted-recon; sid:200014511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.hxxrxy.za.com",nocase; classtype:attempted-recon; sid:200014512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.irxdzy.za.com",nocase; classtype:attempted-recon; sid:200014513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.jdtkva.za.com",nocase; classtype:attempted-recon; sid:200014514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.jrvbcm.za.com",nocase; classtype:attempted-recon; sid:200014515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.jwnhul.za.com",nocase; classtype:attempted-recon; sid:200014516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.kresvt.za.com",nocase; classtype:attempted-recon; sid:200014517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.lqtahv.za.com",nocase; classtype:attempted-recon; sid:200014518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.mcxugn.za.com",nocase; classtype:attempted-recon; sid:200014519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.nxdsar.za.com",nocase; classtype:attempted-recon; sid:200014520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.obeyjn.za.com",nocase; classtype:attempted-recon; sid:200014521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.oplxoj.za.com",nocase; classtype:attempted-recon; sid:200014522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.pgqcnr.za.com",nocase; classtype:attempted-recon; sid:200014523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.qipwcl.za.com",nocase; classtype:attempted-recon; sid:200014524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.qthyus.za.com",nocase; classtype:attempted-recon; sid:200014525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.qzuuho.za.com",nocase; classtype:attempted-recon; sid:200014526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.rtwmgc.za.com",nocase; classtype:attempted-recon; sid:200014527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.sochye.za.com",nocase; classtype:attempted-recon; sid:200014528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.szynbx.za.com",nocase; classtype:attempted-recon; sid:200014529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.tzzwdq.za.com",nocase; classtype:attempted-recon; sid:200014530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.uhzkns.za.com",nocase; classtype:attempted-recon; sid:200014531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.vlqgmb.za.com",nocase; classtype:attempted-recon; sid:200014532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.wyothk.za.com",nocase; classtype:attempted-recon; sid:200014533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiaivisoaureszovvseon.vsenazcmevsioriursi.xqjofw.za.com",nocase; classtype:attempted-recon; sid:200014534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.acysue.za.com",nocase; classtype:attempted-recon; sid:200014535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200014536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200014537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200014538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200014539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.airnja.za.com",nocase; classtype:attempted-recon; sid:200014540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200014541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200014542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200014543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200014544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200014545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200014546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.bangme.za.com",nocase; classtype:attempted-recon; sid:200014547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200014548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.befurr.za.com",nocase; classtype:attempted-recon; sid:200014549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200014550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200014551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200014552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200014553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200014554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200014555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200014556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200014557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200014558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200014559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200014560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200014561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200014562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200014563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200014564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200014565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200014566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200014567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200014568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200014569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200014570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200014571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200014572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200014573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200014574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200014575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200014576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200014577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200014578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200014579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200014580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200014581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200014582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200014583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200014584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200014585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200014586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200014587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200014588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.enksln.za.com",nocase; classtype:attempted-recon; sid:200014589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200014590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200014591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.equmej.za.com",nocase; classtype:attempted-recon; sid:200014592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200014593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200014594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200014595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200014596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200014597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200014598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200014599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200014600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200014601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200014602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.frroav.za.com",nocase; classtype:attempted-recon; sid:200014603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200014604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200014605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200014606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200014607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200014608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200014609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200014610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200014611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200014612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200014613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200014614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200014615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200014616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200014617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200014618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200014619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200014620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200014621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200014622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200014623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200014624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200014625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200014626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200014627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200014628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200014629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200014630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200014631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200014632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200014633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200014634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200014635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200014636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200014637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200014638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200014639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200014640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200014641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200014642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200014643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200014644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200014645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200014646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200014647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200014648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200014649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200014650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200014651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200014652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200014653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200014654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200014655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200014656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200014657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200014658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200014659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200014660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200014661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200014662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200014663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200014664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.laguer.za.com",nocase; classtype:attempted-recon; sid:200014665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200014666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200014667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200014668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200014669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200014670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200014671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200014672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200014673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200014674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200014675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200014676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.maivih.za.com",nocase; classtype:attempted-recon; sid:200014677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200014678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200014679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200014680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200014681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200014682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200014683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200014684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200014685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200014686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200014687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200014688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200014689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200014690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200014691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200014692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200014693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200014694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200014695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200014696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200014697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200014698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200014699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200014700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200014701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200014702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200014703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200014704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200014705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200014706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200014707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200014708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200014709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200014710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200014711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.oynnaf.za.com",nocase; classtype:attempted-recon; sid:200014712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ozgdvq.za.com",nocase; classtype:attempted-recon; sid:200014713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200014714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.pivwti.za.com",nocase; classtype:attempted-recon; sid:200014715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.pksqpw.za.com",nocase; classtype:attempted-recon; sid:200014716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.poigwz.za.com",nocase; classtype:attempted-recon; sid:200014717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ppwmzt.za.com",nocase; classtype:attempted-recon; sid:200014718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.qcpjmm.za.com",nocase; classtype:attempted-recon; sid:200014719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.qfbzop.za.com",nocase; classtype:attempted-recon; sid:200014720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.qfrbez.za.com",nocase; classtype:attempted-recon; sid:200014721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.qphuso.za.com",nocase; classtype:attempted-recon; sid:200014722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.qvfwma.za.com",nocase; classtype:attempted-recon; sid:200014723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.qwnduy.za.com",nocase; classtype:attempted-recon; sid:200014724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200014725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.reaqos.za.com",nocase; classtype:attempted-recon; sid:200014726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200014727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200014728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.roftae.za.com",nocase; classtype:attempted-recon; sid:200014729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.rsnklt.za.com",nocase; classtype:attempted-recon; sid:200014730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.rsuwkc.za.com",nocase; classtype:attempted-recon; sid:200014731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ryqtlk.za.com",nocase; classtype:attempted-recon; sid:200014732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.rzkyqg.za.com",nocase; classtype:attempted-recon; sid:200014733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.scqqle.za.com",nocase; classtype:attempted-recon; sid:200014734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.snmrey.za.com",nocase; classtype:attempted-recon; sid:200014735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.srlqyc.za.com",nocase; classtype:attempted-recon; sid:200014736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.sztsok.za.com",nocase; classtype:attempted-recon; sid:200014737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.tcpzfk.za.com",nocase; classtype:attempted-recon; sid:200014738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200014739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.tfpdde.za.com",nocase; classtype:attempted-recon; sid:200014740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.tipmxj.za.com",nocase; classtype:attempted-recon; sid:200014741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.tlvtct.za.com",nocase; classtype:attempted-recon; sid:200014742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.tlxfsd.za.com",nocase; classtype:attempted-recon; sid:200014743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.tmybve.za.com",nocase; classtype:attempted-recon; sid:200014744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.tubvou.za.com",nocase; classtype:attempted-recon; sid:200014745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.twbvyf.za.com",nocase; classtype:attempted-recon; sid:200014746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.twozdd.za.com",nocase; classtype:attempted-recon; sid:200014747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.uesuju.za.com",nocase; classtype:attempted-recon; sid:200014748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ufrjqp.za.com",nocase; classtype:attempted-recon; sid:200014749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ugbucg.za.com",nocase; classtype:attempted-recon; sid:200014750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ujngcg.za.com",nocase; classtype:attempted-recon; sid:200014751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.umfbax.za.com",nocase; classtype:attempted-recon; sid:200014752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.urycmw.za.com",nocase; classtype:attempted-recon; sid:200014753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.uumird.za.com",nocase; classtype:attempted-recon; sid:200014754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.uyyfoa.za.com",nocase; classtype:attempted-recon; sid:200014755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.vbwfva.za.com",nocase; classtype:attempted-recon; sid:200014756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.vdobfv.za.com",nocase; classtype:attempted-recon; sid:200014757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.virtxq.za.com",nocase; classtype:attempted-recon; sid:200014758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.vjwefx.za.com",nocase; classtype:attempted-recon; sid:200014759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.vvapfd.za.com",nocase; classtype:attempted-recon; sid:200014760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.vwprmh.za.com",nocase; classtype:attempted-recon; sid:200014761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.wdmxau.za.com",nocase; classtype:attempted-recon; sid:200014762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.wposkr.za.com",nocase; classtype:attempted-recon; sid:200014763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.wpzqcb.za.com",nocase; classtype:attempted-recon; sid:200014764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.wvdxil.za.com",nocase; classtype:attempted-recon; sid:200014765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.wvpeyp.za.com",nocase; classtype:attempted-recon; sid:200014766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.wzqpee.za.com",nocase; classtype:attempted-recon; sid:200014767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.wzrrqp.za.com",nocase; classtype:attempted-recon; sid:200014768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.xfwrde.za.com",nocase; classtype:attempted-recon; sid:200014769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.xkgblw.za.com",nocase; classtype:attempted-recon; sid:200014770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.xpyewd.za.com",nocase; classtype:attempted-recon; sid:200014771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ybqjcs.za.com",nocase; classtype:attempted-recon; sid:200014772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.yfxcpy.za.com",nocase; classtype:attempted-recon; sid:200014773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ygekte.za.com",nocase; classtype:attempted-recon; sid:200014774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.ymewff.za.com",nocase; classtype:attempted-recon; sid:200014775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.yptwya.za.com",nocase; classtype:attempted-recon; sid:200014776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.yvgrja.za.com",nocase; classtype:attempted-recon; sid:200014777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.zckoua.za.com",nocase; classtype:attempted-recon; sid:200014778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.zfbgqn.za.com",nocase; classtype:attempted-recon; sid:200014779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.zgjlxb.za.com",nocase; classtype:attempted-recon; sid:200014780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.zlzusf.za.com",nocase; classtype:attempted-recon; sid:200014781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.zsmfjr.za.com",nocase; classtype:attempted-recon; sid:200014782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.zznany.za.com",nocase; classtype:attempted-recon; sid:200014783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovseon.viscazsciureeinsi.zzwuas.za.com",nocase; classtype:attempted-recon; sid:200014784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.acysue.za.com",nocase; classtype:attempted-recon; sid:200014785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200014786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200014787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200014788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200014789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.airnja.za.com",nocase; classtype:attempted-recon; sid:200014790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200014791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200014792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200014793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200014794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200014795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200014796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.bangme.za.com",nocase; classtype:attempted-recon; sid:200014797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200014798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.befurr.za.com",nocase; classtype:attempted-recon; sid:200014799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200014800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200014801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200014802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200014803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200014804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200014805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200014806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200014807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200014808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200014809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200014810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200014811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200014812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200014813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200014814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200014815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200014816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200014817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200014818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200014819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200014820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200014821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200014822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200014823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200014824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200014825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200014826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200014827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200014828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200014829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200014830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200014831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200014832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200014833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200014834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200014835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200014836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200014837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200014838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.enksln.za.com",nocase; classtype:attempted-recon; sid:200014839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200014840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200014841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.equmej.za.com",nocase; classtype:attempted-recon; sid:200014842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200014843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200014844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200014845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200014846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200014847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200014848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200014849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200014850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200014851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200014852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.frroav.za.com",nocase; classtype:attempted-recon; sid:200014853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200014854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200014855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200014856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200014857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200014858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200014859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200014860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200014861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200014862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200014863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200014864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200014865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200014866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200014867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200014868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200014869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200014870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200014871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200014872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200014873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200014874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200014875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200014876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200014877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200014878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200014879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200014880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200014881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200014882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200014883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200014884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200014885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200014886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200014887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200014888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200014889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200014890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200014891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200014892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200014893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200014894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200014895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200014896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200014897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200014898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200014899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200014900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200014901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200014902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200014903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200014904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200014905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200014906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200014907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200014908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200014909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200014910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200014911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200014912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200014913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200014914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.laguer.za.com",nocase; classtype:attempted-recon; sid:200014915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200014916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200014917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200014918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200014919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200014920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200014921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200014922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200014923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200014924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200014925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200014926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.maivih.za.com",nocase; classtype:attempted-recon; sid:200014927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200014928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200014929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200014930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200014931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200014932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200014933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200014934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200014935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200014936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200014937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200014938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200014939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200014940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200014941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200014942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200014943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200014944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200014945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200014946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200014947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200014948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200014949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200014950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200014951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200014952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200014953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200014954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200014955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200014956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200014957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200014958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200014959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200014960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200014961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.oynnaf.za.com",nocase; classtype:attempted-recon; sid:200014962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ozgdvq.za.com",nocase; classtype:attempted-recon; sid:200014963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.paivji.za.com",nocase; classtype:attempted-recon; sid:200014964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200014965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.pemrjn.za.com",nocase; classtype:attempted-recon; sid:200014966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.phkhrx.za.com",nocase; classtype:attempted-recon; sid:200014967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.picwiy.za.com",nocase; classtype:attempted-recon; sid:200014968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.poigwz.za.com",nocase; classtype:attempted-recon; sid:200014969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ppwmzt.za.com",nocase; classtype:attempted-recon; sid:200014970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.pvrmnc.za.com",nocase; classtype:attempted-recon; sid:200014971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.pxqicu.za.com",nocase; classtype:attempted-recon; sid:200014972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.qcpjmm.za.com",nocase; classtype:attempted-recon; sid:200014973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.qfbzop.za.com",nocase; classtype:attempted-recon; sid:200014974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.qfdotp.za.com",nocase; classtype:attempted-recon; sid:200014975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.qfrbez.za.com",nocase; classtype:attempted-recon; sid:200014976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.qphuso.za.com",nocase; classtype:attempted-recon; sid:200014977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.qvfwma.za.com",nocase; classtype:attempted-recon; sid:200014978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200014979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.rfqqga.za.com",nocase; classtype:attempted-recon; sid:200014980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.rhfwsh.za.com",nocase; classtype:attempted-recon; sid:200014981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200014982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200014983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.roftae.za.com",nocase; classtype:attempted-recon; sid:200014984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.rooreg.za.com",nocase; classtype:attempted-recon; sid:200014985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.rpfjaz.za.com",nocase; classtype:attempted-recon; sid:200014986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.rplout.za.com",nocase; classtype:attempted-recon; sid:200014987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.rrajfi.za.com",nocase; classtype:attempted-recon; sid:200014988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.rsnklt.za.com",nocase; classtype:attempted-recon; sid:200014989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.rsuwkc.za.com",nocase; classtype:attempted-recon; sid:200014990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.rujjog.za.com",nocase; classtype:attempted-recon; sid:200014991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ryqtlk.za.com",nocase; classtype:attempted-recon; sid:200014992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.rzkyqg.za.com",nocase; classtype:attempted-recon; sid:200014993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.scqqle.za.com",nocase; classtype:attempted-recon; sid:200014994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.sjolxi.za.com",nocase; classtype:attempted-recon; sid:200014995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.snmrey.za.com",nocase; classtype:attempted-recon; sid:200014996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.sztsok.za.com",nocase; classtype:attempted-recon; sid:200014997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.tayped.za.com",nocase; classtype:attempted-recon; sid:200014998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.tfwvbz.za.com",nocase; classtype:attempted-recon; sid:200014999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.tlvtct.za.com",nocase; classtype:attempted-recon; sid:200015000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.tlxfsd.za.com",nocase; classtype:attempted-recon; sid:200015001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.tmybve.za.com",nocase; classtype:attempted-recon; sid:200015002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.tubvou.za.com",nocase; classtype:attempted-recon; sid:200015003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.twbvyf.za.com",nocase; classtype:attempted-recon; sid:200015004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.twozdd.za.com",nocase; classtype:attempted-recon; sid:200015005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ugbucg.za.com",nocase; classtype:attempted-recon; sid:200015006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.uiiavd.za.com",nocase; classtype:attempted-recon; sid:200015007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ujngcg.za.com",nocase; classtype:attempted-recon; sid:200015008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.uopoem.za.com",nocase; classtype:attempted-recon; sid:200015009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.urycmw.za.com",nocase; classtype:attempted-recon; sid:200015010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.utaekx.za.com",nocase; classtype:attempted-recon; sid:200015011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.uumird.za.com",nocase; classtype:attempted-recon; sid:200015012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.uvowom.za.com",nocase; classtype:attempted-recon; sid:200015013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.uyyfoa.za.com",nocase; classtype:attempted-recon; sid:200015014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.vbwfva.za.com",nocase; classtype:attempted-recon; sid:200015015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.virtxq.za.com",nocase; classtype:attempted-recon; sid:200015016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.vvapfd.za.com",nocase; classtype:attempted-recon; sid:200015017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.vwprmh.za.com",nocase; classtype:attempted-recon; sid:200015018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.wbuilk.za.com",nocase; classtype:attempted-recon; sid:200015019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.wdmxau.za.com",nocase; classtype:attempted-recon; sid:200015020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.whbfgy.za.com",nocase; classtype:attempted-recon; sid:200015021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.wpzqcb.za.com",nocase; classtype:attempted-recon; sid:200015022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.wstujx.za.com",nocase; classtype:attempted-recon; sid:200015023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.wvdxil.za.com",nocase; classtype:attempted-recon; sid:200015024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.xbdhbi.za.com",nocase; classtype:attempted-recon; sid:200015025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.xkgblw.za.com",nocase; classtype:attempted-recon; sid:200015026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.xnbziz.za.com",nocase; classtype:attempted-recon; sid:200015027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.xokvig.za.com",nocase; classtype:attempted-recon; sid:200015028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ybqjcs.za.com",nocase; classtype:attempted-recon; sid:200015029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.yfxcpy.za.com",nocase; classtype:attempted-recon; sid:200015030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ygekte.za.com",nocase; classtype:attempted-recon; sid:200015031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.yilvza.za.com",nocase; classtype:attempted-recon; sid:200015032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.ymewff.za.com",nocase; classtype:attempted-recon; sid:200015033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.yptwya.za.com",nocase; classtype:attempted-recon; sid:200015034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.yvgrja.za.com",nocase; classtype:attempted-recon; sid:200015035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.yxzuhh.za.com",nocase; classtype:attempted-recon; sid:200015036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.yytmgo.za.com",nocase; classtype:attempted-recon; sid:200015037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.zcmgqp.za.com",nocase; classtype:attempted-recon; sid:200015038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.zobtvb.za.com",nocase; classtype:attempted-recon; sid:200015039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.zsmfjr.za.com",nocase; classtype:attempted-recon; sid:200015040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacucaeovvseon.vicsaszcmiureainsi.zzwuas.za.com",nocase; classtype:attempted-recon; sid:200015041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.acysue.za.com",nocase; classtype:attempted-recon; sid:200015042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200015043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200015044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200015045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200015046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.airnja.za.com",nocase; classtype:attempted-recon; sid:200015047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200015048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200015049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200015050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200015051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200015052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200015053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.bangme.za.com",nocase; classtype:attempted-recon; sid:200015054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200015055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.befurr.za.com",nocase; classtype:attempted-recon; sid:200015056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200015057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200015058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200015059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200015060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200015061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200015062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200015063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200015064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200015065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200015066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200015067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200015068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200015069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200015070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200015071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200015072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200015073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200015074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200015075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200015076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200015077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200015078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200015079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200015080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200015081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200015082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200015083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200015084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200015085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200015086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200015087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200015088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200015089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200015090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200015091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200015092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200015093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200015094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200015095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.enksln.za.com",nocase; classtype:attempted-recon; sid:200015096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200015097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200015098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.equmej.za.com",nocase; classtype:attempted-recon; sid:200015099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200015100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200015101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200015102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200015103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200015104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200015105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200015106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200015107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200015108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200015109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.frroav.za.com",nocase; classtype:attempted-recon; sid:200015110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200015111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200015112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200015113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200015114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200015115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200015116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200015117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200015118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200015119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200015120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200015121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200015122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200015123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200015124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200015125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200015126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200015127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200015128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200015129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200015130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200015131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200015132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200015133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200015134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200015135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200015136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200015137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200015138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200015139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200015140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200015141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200015142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200015143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200015144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200015145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200015146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200015147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200015148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200015149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200015150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200015151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200015152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200015153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200015154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200015155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200015156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200015157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200015158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200015159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200015160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200015161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200015162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200015163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200015164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200015165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200015166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200015167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200015168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200015169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200015170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200015171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.laguer.za.com",nocase; classtype:attempted-recon; sid:200015172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200015173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200015174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200015175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200015176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200015177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200015178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200015179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200015180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200015181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200015182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200015183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.maivih.za.com",nocase; classtype:attempted-recon; sid:200015184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200015185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200015186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200015187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200015188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200015189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200015190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200015191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200015192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200015193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200015194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200015195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200015196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200015197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200015198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200015199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200015200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200015201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200015202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200015203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200015204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200015205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200015206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200015207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200015208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200015209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200015210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200015211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200015212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200015213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200015214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200015215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200015216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200015217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200015218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.paivji.za.com",nocase; classtype:attempted-recon; sid:200015219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200015220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.phkhrx.za.com",nocase; classtype:attempted-recon; sid:200015221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.pivwti.za.com",nocase; classtype:attempted-recon; sid:200015222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.pksqpw.za.com",nocase; classtype:attempted-recon; sid:200015223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.poigwz.za.com",nocase; classtype:attempted-recon; sid:200015224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ppwmzt.za.com",nocase; classtype:attempted-recon; sid:200015225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.puzdqh.za.com",nocase; classtype:attempted-recon; sid:200015226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.pvrmnc.za.com",nocase; classtype:attempted-recon; sid:200015227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.qcpjmm.za.com",nocase; classtype:attempted-recon; sid:200015228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.qdwepk.za.com",nocase; classtype:attempted-recon; sid:200015229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.qfbzop.za.com",nocase; classtype:attempted-recon; sid:200015230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.qfdotp.za.com",nocase; classtype:attempted-recon; sid:200015231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.qfrbez.za.com",nocase; classtype:attempted-recon; sid:200015232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.reaqos.za.com",nocase; classtype:attempted-recon; sid:200015233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.rhfwsh.za.com",nocase; classtype:attempted-recon; sid:200015234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200015235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200015236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.rmzoht.za.com",nocase; classtype:attempted-recon; sid:200015237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.rpfjaz.za.com",nocase; classtype:attempted-recon; sid:200015238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.rplout.za.com",nocase; classtype:attempted-recon; sid:200015239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.rsuwkc.za.com",nocase; classtype:attempted-recon; sid:200015240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.scqqle.za.com",nocase; classtype:attempted-recon; sid:200015241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.sjolxi.za.com",nocase; classtype:attempted-recon; sid:200015242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.snmrey.za.com",nocase; classtype:attempted-recon; sid:200015243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.sqmnsg.za.com",nocase; classtype:attempted-recon; sid:200015244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.srlqyc.za.com",nocase; classtype:attempted-recon; sid:200015245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.tayped.za.com",nocase; classtype:attempted-recon; sid:200015246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.tcpzfk.za.com",nocase; classtype:attempted-recon; sid:200015247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.tfpdde.za.com",nocase; classtype:attempted-recon; sid:200015248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.tfwvbz.za.com",nocase; classtype:attempted-recon; sid:200015249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.tlvtct.za.com",nocase; classtype:attempted-recon; sid:200015250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.tlxfsd.za.com",nocase; classtype:attempted-recon; sid:200015251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.tubvou.za.com",nocase; classtype:attempted-recon; sid:200015252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.twbvyf.za.com",nocase; classtype:attempted-recon; sid:200015253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.twozdd.za.com",nocase; classtype:attempted-recon; sid:200015254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ufrjqp.za.com",nocase; classtype:attempted-recon; sid:200015255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ugbucg.za.com",nocase; classtype:attempted-recon; sid:200015256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.uhuhey.za.com",nocase; classtype:attempted-recon; sid:200015257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ujngcg.za.com",nocase; classtype:attempted-recon; sid:200015258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.utaekx.za.com",nocase; classtype:attempted-recon; sid:200015259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.uvowom.za.com",nocase; classtype:attempted-recon; sid:200015260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.vbwfva.za.com",nocase; classtype:attempted-recon; sid:200015261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.vdobfv.za.com",nocase; classtype:attempted-recon; sid:200015262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.virtxq.za.com",nocase; classtype:attempted-recon; sid:200015263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.vjwefx.za.com",nocase; classtype:attempted-recon; sid:200015264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.vvapfd.za.com",nocase; classtype:attempted-recon; sid:200015265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.wbuilk.za.com",nocase; classtype:attempted-recon; sid:200015266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.woddlo.za.com",nocase; classtype:attempted-recon; sid:200015267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.wstujx.za.com",nocase; classtype:attempted-recon; sid:200015268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.wvdxil.za.com",nocase; classtype:attempted-recon; sid:200015269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.wzqpee.za.com",nocase; classtype:attempted-recon; sid:200015270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.wzrrqp.za.com",nocase; classtype:attempted-recon; sid:200015271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.xbdhbi.za.com",nocase; classtype:attempted-recon; sid:200015272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.xfwrde.za.com",nocase; classtype:attempted-recon; sid:200015273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.xkgblw.za.com",nocase; classtype:attempted-recon; sid:200015274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.xnbziz.za.com",nocase; classtype:attempted-recon; sid:200015275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.xpyewd.za.com",nocase; classtype:attempted-recon; sid:200015276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ybqjcs.za.com",nocase; classtype:attempted-recon; sid:200015277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ygekte.za.com",nocase; classtype:attempted-recon; sid:200015278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.yilvza.za.com",nocase; classtype:attempted-recon; sid:200015279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.ymewff.za.com",nocase; classtype:attempted-recon; sid:200015280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.yptwya.za.com",nocase; classtype:attempted-recon; sid:200015281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.yqszfl.za.com",nocase; classtype:attempted-recon; sid:200015282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.yvgrja.za.com",nocase; classtype:attempted-recon; sid:200015283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.yxzuhh.za.com",nocase; classtype:attempted-recon; sid:200015284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.zcmgqp.za.com",nocase; classtype:attempted-recon; sid:200015285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.zgjlxb.za.com",nocase; classtype:attempted-recon; sid:200015286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.zlzusf.za.com",nocase; classtype:attempted-recon; sid:200015287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.zrsgyv.za.com",nocase; classtype:attempted-recon; sid:200015288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcesioriursi.zznany.za.com",nocase; classtype:attempted-recon; sid:200015289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.acysue.za.com",nocase; classtype:attempted-recon; sid:200015290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200015291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200015292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200015293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200015294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.airnja.za.com",nocase; classtype:attempted-recon; sid:200015295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200015296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200015297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200015298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200015299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200015300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200015301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.bangme.za.com",nocase; classtype:attempted-recon; sid:200015302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200015303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.befurr.za.com",nocase; classtype:attempted-recon; sid:200015304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200015305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200015306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200015307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200015308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200015309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200015310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200015311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200015312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200015313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200015314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200015315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200015316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200015317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200015318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200015319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200015320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200015321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200015322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200015323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200015324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200015325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200015326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200015327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200015328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200015329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200015330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200015331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200015332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200015333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200015334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200015335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200015336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200015337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200015338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200015339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200015340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200015341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.enksln.za.com",nocase; classtype:attempted-recon; sid:200015342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200015343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200015344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.equmej.za.com",nocase; classtype:attempted-recon; sid:200015345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200015346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200015347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200015348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200015349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200015350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200015351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200015352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200015353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200015354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200015355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.frroav.za.com",nocase; classtype:attempted-recon; sid:200015356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200015357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200015358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200015359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200015360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200015361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200015362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200015363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200015364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200015365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200015366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200015367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200015368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200015369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200015370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200015371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200015372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200015373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200015374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200015375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200015376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200015377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200015378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200015379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200015380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200015381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200015382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200015383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200015384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200015385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200015386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200015387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200015388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200015389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200015390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200015391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200015392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200015393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200015394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200015395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200015396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200015397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200015398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200015399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200015400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200015401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200015402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200015403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200015404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200015405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200015406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200015407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200015408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200015409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200015410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200015411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200015412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200015413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200015414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200015415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200015416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200015417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.laguer.za.com",nocase; classtype:attempted-recon; sid:200015418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200015419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200015420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200015421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200015422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200015423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200015424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200015425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200015426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200015427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200015428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200015429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.maivih.za.com",nocase; classtype:attempted-recon; sid:200015430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200015431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200015432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200015433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200015434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200015435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200015436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200015437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200015438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200015439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200015440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200015441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200015442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200015443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200015444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200015445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200015446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200015447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200015448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200015449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200015450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200015451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200015452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200015453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200015454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200015455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200015456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200015457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200015458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200015459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200015460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200015461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200015462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200015463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200015464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200015465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.picwiy.za.com",nocase; classtype:attempted-recon; sid:200015466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.pivwti.za.com",nocase; classtype:attempted-recon; sid:200015467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.pkdobq.za.com",nocase; classtype:attempted-recon; sid:200015468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.pksqpw.za.com",nocase; classtype:attempted-recon; sid:200015469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.poigwz.za.com",nocase; classtype:attempted-recon; sid:200015470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.pvrmnc.za.com",nocase; classtype:attempted-recon; sid:200015471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.pxqicu.za.com",nocase; classtype:attempted-recon; sid:200015472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.qdwepk.za.com",nocase; classtype:attempted-recon; sid:200015473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.qfrbez.za.com",nocase; classtype:attempted-recon; sid:200015474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.qgispn.za.com",nocase; classtype:attempted-recon; sid:200015475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.qwnduy.za.com",nocase; classtype:attempted-recon; sid:200015476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.rbvyrh.za.com",nocase; classtype:attempted-recon; sid:200015477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.rclyhu.za.com",nocase; classtype:attempted-recon; sid:200015478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200015479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.rmzoht.za.com",nocase; classtype:attempted-recon; sid:200015480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.roftae.za.com",nocase; classtype:attempted-recon; sid:200015481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.rooreg.za.com",nocase; classtype:attempted-recon; sid:200015482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.rpfjaz.za.com",nocase; classtype:attempted-recon; sid:200015483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.rplout.za.com",nocase; classtype:attempted-recon; sid:200015484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.rrajfi.za.com",nocase; classtype:attempted-recon; sid:200015485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.rsuwkc.za.com",nocase; classtype:attempted-recon; sid:200015486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.rujjog.za.com",nocase; classtype:attempted-recon; sid:200015487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ryqtlk.za.com",nocase; classtype:attempted-recon; sid:200015488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.rzkyqg.za.com",nocase; classtype:attempted-recon; sid:200015489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.sjolxi.za.com",nocase; classtype:attempted-recon; sid:200015490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.snmrey.za.com",nocase; classtype:attempted-recon; sid:200015491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.srlqyc.za.com",nocase; classtype:attempted-recon; sid:200015492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.sztsok.za.com",nocase; classtype:attempted-recon; sid:200015493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.tcpzfk.za.com",nocase; classtype:attempted-recon; sid:200015494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200015495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.tipmxj.za.com",nocase; classtype:attempted-recon; sid:200015496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.tlxfsd.za.com",nocase; classtype:attempted-recon; sid:200015497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.tmybve.za.com",nocase; classtype:attempted-recon; sid:200015498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.twozdd.za.com",nocase; classtype:attempted-recon; sid:200015499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.tztcbk.za.com",nocase; classtype:attempted-recon; sid:200015500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.uesuju.za.com",nocase; classtype:attempted-recon; sid:200015501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.uhtsna.za.com",nocase; classtype:attempted-recon; sid:200015502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.uiiavd.za.com",nocase; classtype:attempted-recon; sid:200015503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ujngcg.za.com",nocase; classtype:attempted-recon; sid:200015504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.utaekx.za.com",nocase; classtype:attempted-recon; sid:200015505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.uyyfoa.za.com",nocase; classtype:attempted-recon; sid:200015506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.vbwfva.za.com",nocase; classtype:attempted-recon; sid:200015507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.vdobfv.za.com",nocase; classtype:attempted-recon; sid:200015508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.virtxq.za.com",nocase; classtype:attempted-recon; sid:200015509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.vvapfd.za.com",nocase; classtype:attempted-recon; sid:200015510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.whbfgy.za.com",nocase; classtype:attempted-recon; sid:200015511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.woddlo.za.com",nocase; classtype:attempted-recon; sid:200015512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.wposkr.za.com",nocase; classtype:attempted-recon; sid:200015513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.wvdxil.za.com",nocase; classtype:attempted-recon; sid:200015514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.xfwrde.za.com",nocase; classtype:attempted-recon; sid:200015515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.xokvig.za.com",nocase; classtype:attempted-recon; sid:200015516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.yfxcpy.za.com",nocase; classtype:attempted-recon; sid:200015517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ygekte.za.com",nocase; classtype:attempted-recon; sid:200015518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.yilvza.za.com",nocase; classtype:attempted-recon; sid:200015519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.ymewff.za.com",nocase; classtype:attempted-recon; sid:200015520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.yptwya.za.com",nocase; classtype:attempted-recon; sid:200015521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.yqszfl.za.com",nocase; classtype:attempted-recon; sid:200015522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.yvgrja.za.com",nocase; classtype:attempted-recon; sid:200015523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.yxzuhh.za.com",nocase; classtype:attempted-recon; sid:200015524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.zcmgqp.za.com",nocase; classtype:attempted-recon; sid:200015525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.zfbgqn.za.com",nocase; classtype:attempted-recon; sid:200015526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.zgjlxb.za.com",nocase; classtype:attempted-recon; sid:200015527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.zlzusf.za.com",nocase; classtype:attempted-recon; sid:200015528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.zrsgyv.za.com",nocase; classtype:attempted-recon; sid:200015529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.zsmfjr.za.com",nocase; classtype:attempted-recon; sid:200015530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.zznany.za.com",nocase; classtype:attempted-recon; sid:200015531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisnoacunureszovvseonc.vsisazcmevsioriursi.zzwuas.za.com",nocase; classtype:attempted-recon; sid:200015532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.acdtum.za.com",nocase; classtype:attempted-recon; sid:200015533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.balvnd.za.com",nocase; classtype:attempted-recon; sid:200015534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.bbzbtx.za.com",nocase; classtype:attempted-recon; sid:200015535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.blacvp.za.com",nocase; classtype:attempted-recon; sid:200015536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.blrvdr.za.com",nocase; classtype:attempted-recon; sid:200015537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.blxztu.za.com",nocase; classtype:attempted-recon; sid:200015538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.bnrpkz.za.com",nocase; classtype:attempted-recon; sid:200015539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.bnywlu.za.com",nocase; classtype:attempted-recon; sid:200015540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.cbwqrw.za.com",nocase; classtype:attempted-recon; sid:200015541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.cqqpsz.za.com",nocase; classtype:attempted-recon; sid:200015542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.dbmdfr.za.com",nocase; classtype:attempted-recon; sid:200015543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.dvqcit.za.com",nocase; classtype:attempted-recon; sid:200015544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.fmkgao.za.com",nocase; classtype:attempted-recon; sid:200015545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.geoqun.za.com",nocase; classtype:attempted-recon; sid:200015546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.gggxpw.za.com",nocase; classtype:attempted-recon; sid:200015547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.gzauog.za.com",nocase; classtype:attempted-recon; sid:200015548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.hchaca.za.com",nocase; classtype:attempted-recon; sid:200015549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.hjrhmw.za.com",nocase; classtype:attempted-recon; sid:200015550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.hutqex.za.com",nocase; classtype:attempted-recon; sid:200015551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.hxxrxy.za.com",nocase; classtype:attempted-recon; sid:200015552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.iaoyzz.za.com",nocase; classtype:attempted-recon; sid:200015553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.ijpawu.za.com",nocase; classtype:attempted-recon; sid:200015554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.irpccg.za.com",nocase; classtype:attempted-recon; sid:200015555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.irxdzy.za.com",nocase; classtype:attempted-recon; sid:200015556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.jwnhul.za.com",nocase; classtype:attempted-recon; sid:200015557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.koxgxs.za.com",nocase; classtype:attempted-recon; sid:200015558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.kresvt.za.com",nocase; classtype:attempted-recon; sid:200015559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.lcadhp.za.com",nocase; classtype:attempted-recon; sid:200015560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.lquolu.za.com",nocase; classtype:attempted-recon; sid:200015561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.lvpxrb.za.com",nocase; classtype:attempted-recon; sid:200015562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.mcxugn.za.com",nocase; classtype:attempted-recon; sid:200015563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.nxdsar.za.com",nocase; classtype:attempted-recon; sid:200015564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.obeyjn.za.com",nocase; classtype:attempted-recon; sid:200015565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.odujie.za.com",nocase; classtype:attempted-recon; sid:200015566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.olycnz.za.com",nocase; classtype:attempted-recon; sid:200015567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.oplxoj.za.com",nocase; classtype:attempted-recon; sid:200015568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.pgqcnr.za.com",nocase; classtype:attempted-recon; sid:200015569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.pqyvgi.za.com",nocase; classtype:attempted-recon; sid:200015570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.psicaz.za.com",nocase; classtype:attempted-recon; sid:200015571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.qipwcl.za.com",nocase; classtype:attempted-recon; sid:200015572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.qsfxkv.za.com",nocase; classtype:attempted-recon; sid:200015573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.qthyus.za.com",nocase; classtype:attempted-recon; sid:200015574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.rqumqp.za.com",nocase; classtype:attempted-recon; sid:200015575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.spsvre.za.com",nocase; classtype:attempted-recon; sid:200015576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.tbtenr.za.com",nocase; classtype:attempted-recon; sid:200015577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.vckxwj.za.com",nocase; classtype:attempted-recon; sid:200015578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.vefkbx.za.com",nocase; classtype:attempted-recon; sid:200015579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.vowycz.za.com",nocase; classtype:attempted-recon; sid:200015580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.wtkudd.za.com",nocase; classtype:attempted-recon; sid:200015581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.wyothk.za.com",nocase; classtype:attempted-recon; sid:200015582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.xdjnuh.za.com",nocase; classtype:attempted-recon; sid:200015583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.xqjofw.za.com",nocase; classtype:attempted-recon; sid:200015584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.ymsvdh.za.com",nocase; classtype:attempted-recon; sid:200015585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.yozdqk.za.com",nocase; classtype:attempted-recon; sid:200015586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovseon.visazciureeinsi.ywsztl.za.com",nocase; classtype:attempted-recon; sid:200015587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.acdtum.za.com",nocase; classtype:attempted-recon; sid:200015588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.balvnd.za.com",nocase; classtype:attempted-recon; sid:200015589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.blrvdr.za.com",nocase; classtype:attempted-recon; sid:200015590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.bnrpkz.za.com",nocase; classtype:attempted-recon; sid:200015591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.cjimsd.za.com",nocase; classtype:attempted-recon; sid:200015592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.cqqpsz.za.com",nocase; classtype:attempted-recon; sid:200015593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.cxwohm.za.com",nocase; classtype:attempted-recon; sid:200015594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.dfmiex.za.com",nocase; classtype:attempted-recon; sid:200015595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.emiduh.za.com",nocase; classtype:attempted-recon; sid:200015596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.fmkgao.za.com",nocase; classtype:attempted-recon; sid:200015597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.fonuba.za.com",nocase; classtype:attempted-recon; sid:200015598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.gggxpw.za.com",nocase; classtype:attempted-recon; sid:200015599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.gzauog.za.com",nocase; classtype:attempted-recon; sid:200015600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.hchaca.za.com",nocase; classtype:attempted-recon; sid:200015601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.hyxhne.za.com",nocase; classtype:attempted-recon; sid:200015602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.ijpawu.za.com",nocase; classtype:attempted-recon; sid:200015603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.iowdcc.za.com",nocase; classtype:attempted-recon; sid:200015604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.ipqbiq.za.com",nocase; classtype:attempted-recon; sid:200015605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.irpccg.za.com",nocase; classtype:attempted-recon; sid:200015606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.irxdzy.za.com",nocase; classtype:attempted-recon; sid:200015607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.jdtkva.za.com",nocase; classtype:attempted-recon; sid:200015608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.jgdgat.za.com",nocase; classtype:attempted-recon; sid:200015609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.joetyi.za.com",nocase; classtype:attempted-recon; sid:200015610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.jwnhul.za.com",nocase; classtype:attempted-recon; sid:200015611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.kaixbv.za.com",nocase; classtype:attempted-recon; sid:200015612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.koxgxs.za.com",nocase; classtype:attempted-recon; sid:200015613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.kresvt.za.com",nocase; classtype:attempted-recon; sid:200015614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.lquolu.za.com",nocase; classtype:attempted-recon; sid:200015615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.lvpxrb.za.com",nocase; classtype:attempted-recon; sid:200015616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.mcxugn.za.com",nocase; classtype:attempted-recon; sid:200015617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.nxdsar.za.com",nocase; classtype:attempted-recon; sid:200015618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.odujie.za.com",nocase; classtype:attempted-recon; sid:200015619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.phkavb.za.com",nocase; classtype:attempted-recon; sid:200015620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.pigrir.za.com",nocase; classtype:attempted-recon; sid:200015621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.pqyvgi.za.com",nocase; classtype:attempted-recon; sid:200015622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.qsfxkv.za.com",nocase; classtype:attempted-recon; sid:200015623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.qzuuho.za.com",nocase; classtype:attempted-recon; sid:200015624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.rolbdo.za.com",nocase; classtype:attempted-recon; sid:200015625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.rqumqp.za.com",nocase; classtype:attempted-recon; sid:200015626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.swhgkf.za.com",nocase; classtype:attempted-recon; sid:200015627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.tzzwdq.za.com",nocase; classtype:attempted-recon; sid:200015628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.uhzkns.za.com",nocase; classtype:attempted-recon; sid:200015629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.vckxwj.za.com",nocase; classtype:attempted-recon; sid:200015630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.vefkbx.za.com",nocase; classtype:attempted-recon; sid:200015631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.vlqgmb.za.com",nocase; classtype:attempted-recon; sid:200015632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.wmbipa.za.com",nocase; classtype:attempted-recon; sid:200015633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.wtkudd.za.com",nocase; classtype:attempted-recon; sid:200015634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.ybvvxi.za.com",nocase; classtype:attempted-recon; sid:200015635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.ycgkkz.za.com",nocase; classtype:attempted-recon; sid:200015636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.ymsvdh.za.com",nocase; classtype:attempted-recon; sid:200015637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.yozdqk.za.com",nocase; classtype:attempted-recon; sid:200015638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoaccaeovvseon.visazcmiureainsi.ywsztl.za.com",nocase; classtype:attempted-recon; sid:200015639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.acdtum.za.com",nocase; classtype:attempted-recon; sid:200015640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.akfmmu.za.com",nocase; classtype:attempted-recon; sid:200015641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.balvnd.za.com",nocase; classtype:attempted-recon; sid:200015642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.blacvp.za.com",nocase; classtype:attempted-recon; sid:200015643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.blrvdr.za.com",nocase; classtype:attempted-recon; sid:200015644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.blxztu.za.com",nocase; classtype:attempted-recon; sid:200015645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.bvjqmk.za.com",nocase; classtype:attempted-recon; sid:200015646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.cjimsd.za.com",nocase; classtype:attempted-recon; sid:200015647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.cozlty.za.com",nocase; classtype:attempted-recon; sid:200015648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.cqqpsz.za.com",nocase; classtype:attempted-recon; sid:200015649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.dfmiex.za.com",nocase; classtype:attempted-recon; sid:200015650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.dvqcit.za.com",nocase; classtype:attempted-recon; sid:200015651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.fmkgao.za.com",nocase; classtype:attempted-recon; sid:200015652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.fonuba.za.com",nocase; classtype:attempted-recon; sid:200015653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.geoqun.za.com",nocase; classtype:attempted-recon; sid:200015654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.gltlxm.za.com",nocase; classtype:attempted-recon; sid:200015655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.hutqex.za.com",nocase; classtype:attempted-recon; sid:200015656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.hxxrxy.za.com",nocase; classtype:attempted-recon; sid:200015657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.hyxhne.za.com",nocase; classtype:attempted-recon; sid:200015658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.iaoyzz.za.com",nocase; classtype:attempted-recon; sid:200015659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.ijpawu.za.com",nocase; classtype:attempted-recon; sid:200015660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.iowdcc.za.com",nocase; classtype:attempted-recon; sid:200015661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.ipqbiq.za.com",nocase; classtype:attempted-recon; sid:200015662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.irpccg.za.com",nocase; classtype:attempted-recon; sid:200015663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.jdtkva.za.com",nocase; classtype:attempted-recon; sid:200015664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.jwnhul.za.com",nocase; classtype:attempted-recon; sid:200015665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.kaixbv.za.com",nocase; classtype:attempted-recon; sid:200015666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.koxgxs.za.com",nocase; classtype:attempted-recon; sid:200015667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.lqtahv.za.com",nocase; classtype:attempted-recon; sid:200015668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.lvpxrb.za.com",nocase; classtype:attempted-recon; sid:200015669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.obeyjn.za.com",nocase; classtype:attempted-recon; sid:200015670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.odujie.za.com",nocase; classtype:attempted-recon; sid:200015671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.olycnz.za.com",nocase; classtype:attempted-recon; sid:200015672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.pgqcnr.za.com",nocase; classtype:attempted-recon; sid:200015673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.qipwcl.za.com",nocase; classtype:attempted-recon; sid:200015674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.qmdgnc.za.com",nocase; classtype:attempted-recon; sid:200015675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.qthyus.za.com",nocase; classtype:attempted-recon; sid:200015676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.rolbdo.za.com",nocase; classtype:attempted-recon; sid:200015677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.rqumqp.za.com",nocase; classtype:attempted-recon; sid:200015678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.rtwmgc.za.com",nocase; classtype:attempted-recon; sid:200015679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.sochye.za.com",nocase; classtype:attempted-recon; sid:200015680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.swhgkf.za.com",nocase; classtype:attempted-recon; sid:200015681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.szynbx.za.com",nocase; classtype:attempted-recon; sid:200015682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.tzzwdq.za.com",nocase; classtype:attempted-recon; sid:200015683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.uhzkns.za.com",nocase; classtype:attempted-recon; sid:200015684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.vckxwj.za.com",nocase; classtype:attempted-recon; sid:200015685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.vowycz.za.com",nocase; classtype:attempted-recon; sid:200015686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.wmbipa.za.com",nocase; classtype:attempted-recon; sid:200015687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.wtkudd.za.com",nocase; classtype:attempted-recon; sid:200015688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.xdjnuh.za.com",nocase; classtype:attempted-recon; sid:200015689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.xmvpwm.za.com",nocase; classtype:attempted-recon; sid:200015690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.xqjofw.za.com",nocase; classtype:attempted-recon; sid:200015691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcesioriursi.ymsvdh.za.com",nocase; classtype:attempted-recon; sid:200015692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.acdtum.za.com",nocase; classtype:attempted-recon; sid:200015693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.adoukk.za.com",nocase; classtype:attempted-recon; sid:200015694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.balvnd.za.com",nocase; classtype:attempted-recon; sid:200015695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.bbzbtx.za.com",nocase; classtype:attempted-recon; sid:200015696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.blacvp.za.com",nocase; classtype:attempted-recon; sid:200015697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.blrvdr.za.com",nocase; classtype:attempted-recon; sid:200015698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.cozlty.za.com",nocase; classtype:attempted-recon; sid:200015699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.cqqpsz.za.com",nocase; classtype:attempted-recon; sid:200015700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.cxwohm.za.com",nocase; classtype:attempted-recon; sid:200015701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.dbmdfr.za.com",nocase; classtype:attempted-recon; sid:200015702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.dfmiex.za.com",nocase; classtype:attempted-recon; sid:200015703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.dvqcit.za.com",nocase; classtype:attempted-recon; sid:200015704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.emiduh.za.com",nocase; classtype:attempted-recon; sid:200015705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.fmkgao.za.com",nocase; classtype:attempted-recon; sid:200015706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.geoqun.za.com",nocase; classtype:attempted-recon; sid:200015707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.gggxpw.za.com",nocase; classtype:attempted-recon; sid:200015708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.gltlxm.za.com",nocase; classtype:attempted-recon; sid:200015709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.gzauog.za.com",nocase; classtype:attempted-recon; sid:200015710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.hxxrxy.za.com",nocase; classtype:attempted-recon; sid:200015711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.ijpawu.za.com",nocase; classtype:attempted-recon; sid:200015712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.iowdcc.za.com",nocase; classtype:attempted-recon; sid:200015713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.irpccg.za.com",nocase; classtype:attempted-recon; sid:200015714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.irxdzy.za.com",nocase; classtype:attempted-recon; sid:200015715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.jdtkva.za.com",nocase; classtype:attempted-recon; sid:200015716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.kaixbv.za.com",nocase; classtype:attempted-recon; sid:200015717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.lcadhp.za.com",nocase; classtype:attempted-recon; sid:200015718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.lquolu.za.com",nocase; classtype:attempted-recon; sid:200015719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.lvpxrb.za.com",nocase; classtype:attempted-recon; sid:200015720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.nxdsar.za.com",nocase; classtype:attempted-recon; sid:200015721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.odujie.za.com",nocase; classtype:attempted-recon; sid:200015722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.olycnz.za.com",nocase; classtype:attempted-recon; sid:200015723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.oplxoj.za.com",nocase; classtype:attempted-recon; sid:200015724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.phkavb.za.com",nocase; classtype:attempted-recon; sid:200015725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.pigrir.za.com",nocase; classtype:attempted-recon; sid:200015726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.psicaz.za.com",nocase; classtype:attempted-recon; sid:200015727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.qthyus.za.com",nocase; classtype:attempted-recon; sid:200015728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.qzuuho.za.com",nocase; classtype:attempted-recon; sid:200015729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.rolbdo.za.com",nocase; classtype:attempted-recon; sid:200015730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.swhgkf.za.com",nocase; classtype:attempted-recon; sid:200015731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.tzzwdq.za.com",nocase; classtype:attempted-recon; sid:200015732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.uhzkns.za.com",nocase; classtype:attempted-recon; sid:200015733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.usrwro.za.com",nocase; classtype:attempted-recon; sid:200015734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.vckxwj.za.com",nocase; classtype:attempted-recon; sid:200015735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.vefkbx.za.com",nocase; classtype:attempted-recon; sid:200015736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.vlqgmb.za.com",nocase; classtype:attempted-recon; sid:200015737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.wyothk.za.com",nocase; classtype:attempted-recon; sid:200015738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.xqjofw.za.com",nocase; classtype:attempted-recon; sid:200015739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.yozdqk.za.com",nocase; classtype:attempted-recon; sid:200015740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuiavisoacnureszovvseon.visazcmevsioriursi.ypapkj.za.com",nocase; classtype:attempted-recon; sid:200015741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.acysue.za.com",nocase; classtype:attempted-recon; sid:200015742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.aeaaij.za.com",nocase; classtype:attempted-recon; sid:200015743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.aetzyx.za.com",nocase; classtype:attempted-recon; sid:200015744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.agxyxw.za.com",nocase; classtype:attempted-recon; sid:200015745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.aiczsa.za.com",nocase; classtype:attempted-recon; sid:200015746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.airnja.za.com",nocase; classtype:attempted-recon; sid:200015747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ajgwlg.za.com",nocase; classtype:attempted-recon; sid:200015748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.alcdkp.za.com",nocase; classtype:attempted-recon; sid:200015749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.atnpja.za.com",nocase; classtype:attempted-recon; sid:200015750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.attlqw.za.com",nocase; classtype:attempted-recon; sid:200015751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.axhyue.za.com",nocase; classtype:attempted-recon; sid:200015752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ayvpej.za.com",nocase; classtype:attempted-recon; sid:200015753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.bangme.za.com",nocase; classtype:attempted-recon; sid:200015754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.bdhjoe.za.com",nocase; classtype:attempted-recon; sid:200015755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.befurr.za.com",nocase; classtype:attempted-recon; sid:200015756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.bfuapo.za.com",nocase; classtype:attempted-recon; sid:200015757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.bjrlsn.za.com",nocase; classtype:attempted-recon; sid:200015758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.bkcywi.za.com",nocase; classtype:attempted-recon; sid:200015759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.bvtbny.za.com",nocase; classtype:attempted-recon; sid:200015760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.bxcbkt.za.com",nocase; classtype:attempted-recon; sid:200015761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.byguuc.za.com",nocase; classtype:attempted-recon; sid:200015762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.bznaak.za.com",nocase; classtype:attempted-recon; sid:200015763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.caipnu.za.com",nocase; classtype:attempted-recon; sid:200015764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.cbxspx.za.com",nocase; classtype:attempted-recon; sid:200015765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ccjole.za.com",nocase; classtype:attempted-recon; sid:200015766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.cgrfee.za.com",nocase; classtype:attempted-recon; sid:200015767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.cluemm.za.com",nocase; classtype:attempted-recon; sid:200015768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.cnjzqo.za.com",nocase; classtype:attempted-recon; sid:200015769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.cpjomt.za.com",nocase; classtype:attempted-recon; sid:200015770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.cqikbq.za.com",nocase; classtype:attempted-recon; sid:200015771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.cstvyz.za.com",nocase; classtype:attempted-recon; sid:200015772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ctfaoz.za.com",nocase; classtype:attempted-recon; sid:200015773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ctsuwx.za.com",nocase; classtype:attempted-recon; sid:200015774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.cxvesz.za.com",nocase; classtype:attempted-recon; sid:200015775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.daxqpj.za.com",nocase; classtype:attempted-recon; sid:200015776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dbxmic.za.com",nocase; classtype:attempted-recon; sid:200015777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dbyapt.za.com",nocase; classtype:attempted-recon; sid:200015778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.deocmk.za.com",nocase; classtype:attempted-recon; sid:200015779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dgqqzk.za.com",nocase; classtype:attempted-recon; sid:200015780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dhitmj.za.com",nocase; classtype:attempted-recon; sid:200015781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dkcyph.za.com",nocase; classtype:attempted-recon; sid:200015782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dknouc.za.com",nocase; classtype:attempted-recon; sid:200015783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dkxwtn.za.com",nocase; classtype:attempted-recon; sid:200015784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dlhefx.za.com",nocase; classtype:attempted-recon; sid:200015785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dlzdwm.za.com",nocase; classtype:attempted-recon; sid:200015786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dmgbrn.za.com",nocase; classtype:attempted-recon; sid:200015787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dohoyv.za.com",nocase; classtype:attempted-recon; sid:200015788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dpfplb.za.com",nocase; classtype:attempted-recon; sid:200015789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.drvpxu.za.com",nocase; classtype:attempted-recon; sid:200015790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dtlrgj.za.com",nocase; classtype:attempted-recon; sid:200015791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.dzpmfz.za.com",nocase; classtype:attempted-recon; sid:200015792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ebaawf.za.com",nocase; classtype:attempted-recon; sid:200015793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.eegabi.za.com",nocase; classtype:attempted-recon; sid:200015794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.eiggzc.za.com",nocase; classtype:attempted-recon; sid:200015795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.enksln.za.com",nocase; classtype:attempted-recon; sid:200015796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.epdexz.za.com",nocase; classtype:attempted-recon; sid:200015797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.eqfynh.za.com",nocase; classtype:attempted-recon; sid:200015798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.equmej.za.com",nocase; classtype:attempted-recon; sid:200015799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.etibxf.za.com",nocase; classtype:attempted-recon; sid:200015800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.etswbl.za.com",nocase; classtype:attempted-recon; sid:200015801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.eugwas.za.com",nocase; classtype:attempted-recon; sid:200015802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ewhrdc.za.com",nocase; classtype:attempted-recon; sid:200015803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.eytnjs.za.com",nocase; classtype:attempted-recon; sid:200015804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.fabbxw.za.com",nocase; classtype:attempted-recon; sid:200015805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.fauyqv.za.com",nocase; classtype:attempted-recon; sid:200015806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.fhylla.za.com",nocase; classtype:attempted-recon; sid:200015807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.figdiz.za.com",nocase; classtype:attempted-recon; sid:200015808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.fpyzoz.za.com",nocase; classtype:attempted-recon; sid:200015809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.frroav.za.com",nocase; classtype:attempted-recon; sid:200015810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.fwmztl.za.com",nocase; classtype:attempted-recon; sid:200015811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.gclajk.za.com",nocase; classtype:attempted-recon; sid:200015812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.gfrdxv.za.com",nocase; classtype:attempted-recon; sid:200015813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ggxtiz.za.com",nocase; classtype:attempted-recon; sid:200015814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.gplcly.za.com",nocase; classtype:attempted-recon; sid:200015815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.grlmkv.za.com",nocase; classtype:attempted-recon; sid:200015816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.gubhky.za.com",nocase; classtype:attempted-recon; sid:200015817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.guzomb.za.com",nocase; classtype:attempted-recon; sid:200015818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.gvbmgq.za.com",nocase; classtype:attempted-recon; sid:200015819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.gwvhgu.za.com",nocase; classtype:attempted-recon; sid:200015820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hjoven.za.com",nocase; classtype:attempted-recon; sid:200015821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hkieuc.za.com",nocase; classtype:attempted-recon; sid:200015822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hklvra.za.com",nocase; classtype:attempted-recon; sid:200015823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hldgqg.za.com",nocase; classtype:attempted-recon; sid:200015824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hpvzmq.za.com",nocase; classtype:attempted-recon; sid:200015825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hsobxm.za.com",nocase; classtype:attempted-recon; sid:200015826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hsxsye.za.com",nocase; classtype:attempted-recon; sid:200015827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hyhijo.za.com",nocase; classtype:attempted-recon; sid:200015828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.hzmmyk.za.com",nocase; classtype:attempted-recon; sid:200015829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.iaowza.za.com",nocase; classtype:attempted-recon; sid:200015830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.iazdui.za.com",nocase; classtype:attempted-recon; sid:200015831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ibdznx.za.com",nocase; classtype:attempted-recon; sid:200015832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.icqbyi.za.com",nocase; classtype:attempted-recon; sid:200015833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ihytpv.za.com",nocase; classtype:attempted-recon; sid:200015834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.iieddd.za.com",nocase; classtype:attempted-recon; sid:200015835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.iivqdq.za.com",nocase; classtype:attempted-recon; sid:200015836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.iksnzw.za.com",nocase; classtype:attempted-recon; sid:200015837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ilnsyb.za.com",nocase; classtype:attempted-recon; sid:200015838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.inilsf.za.com",nocase; classtype:attempted-recon; sid:200015839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ipavwe.za.com",nocase; classtype:attempted-recon; sid:200015840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ipckgf.za.com",nocase; classtype:attempted-recon; sid:200015841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.iqhnep.za.com",nocase; classtype:attempted-recon; sid:200015842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.isfnre.za.com",nocase; classtype:attempted-recon; sid:200015843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.itoeyw.za.com",nocase; classtype:attempted-recon; sid:200015844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jbgyvv.za.com",nocase; classtype:attempted-recon; sid:200015845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jhbjti.za.com",nocase; classtype:attempted-recon; sid:200015846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jimkqm.za.com",nocase; classtype:attempted-recon; sid:200015847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jjtebf.za.com",nocase; classtype:attempted-recon; sid:200015848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jnvwvr.za.com",nocase; classtype:attempted-recon; sid:200015849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jokoqq.za.com",nocase; classtype:attempted-recon; sid:200015850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jrbyeg.za.com",nocase; classtype:attempted-recon; sid:200015851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jueaim.za.com",nocase; classtype:attempted-recon; sid:200015852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.jvyhkm.za.com",nocase; classtype:attempted-recon; sid:200015853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kadyvz.za.com",nocase; classtype:attempted-recon; sid:200015854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kamowm.za.com",nocase; classtype:attempted-recon; sid:200015855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kbubhp.za.com",nocase; classtype:attempted-recon; sid:200015856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kbuhif.za.com",nocase; classtype:attempted-recon; sid:200015857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kcsxhb.za.com",nocase; classtype:attempted-recon; sid:200015858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.keiczj.za.com",nocase; classtype:attempted-recon; sid:200015859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kfwoih.za.com",nocase; classtype:attempted-recon; sid:200015860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.khaylv.za.com",nocase; classtype:attempted-recon; sid:200015861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kklrfz.za.com",nocase; classtype:attempted-recon; sid:200015862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.klngsb.za.com",nocase; classtype:attempted-recon; sid:200015863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kmuhkc.za.com",nocase; classtype:attempted-recon; sid:200015864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kopnbv.za.com",nocase; classtype:attempted-recon; sid:200015865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kqfoqs.za.com",nocase; classtype:attempted-recon; sid:200015866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ktzhyt.za.com",nocase; classtype:attempted-recon; sid:200015867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kuycqq.za.com",nocase; classtype:attempted-recon; sid:200015868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kvfyvz.za.com",nocase; classtype:attempted-recon; sid:200015869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kvtqsz.za.com",nocase; classtype:attempted-recon; sid:200015870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.kyzuqj.za.com",nocase; classtype:attempted-recon; sid:200015871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.laguer.za.com",nocase; classtype:attempted-recon; sid:200015872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.lavnql.za.com",nocase; classtype:attempted-recon; sid:200015873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.lfeyoa.za.com",nocase; classtype:attempted-recon; sid:200015874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.llfmbd.za.com",nocase; classtype:attempted-recon; sid:200015875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.lltgtv.za.com",nocase; classtype:attempted-recon; sid:200015876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.lluhni.za.com",nocase; classtype:attempted-recon; sid:200015877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.lnhweo.za.com",nocase; classtype:attempted-recon; sid:200015878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.lryoni.za.com",nocase; classtype:attempted-recon; sid:200015879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ludrij.za.com",nocase; classtype:attempted-recon; sid:200015880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.lwbpzn.za.com",nocase; classtype:attempted-recon; sid:200015881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.lyydbz.za.com",nocase; classtype:attempted-recon; sid:200015882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.macpqa.za.com",nocase; classtype:attempted-recon; sid:200015883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.maivih.za.com",nocase; classtype:attempted-recon; sid:200015884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mcabmo.za.com",nocase; classtype:attempted-recon; sid:200015885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mfnwca.za.com",nocase; classtype:attempted-recon; sid:200015886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mfrfhh.za.com",nocase; classtype:attempted-recon; sid:200015887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mftcmf.za.com",nocase; classtype:attempted-recon; sid:200015888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mhvcvt.za.com",nocase; classtype:attempted-recon; sid:200015889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mhxwoz.za.com",nocase; classtype:attempted-recon; sid:200015890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mnalmf.za.com",nocase; classtype:attempted-recon; sid:200015891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mrezau.za.com",nocase; classtype:attempted-recon; sid:200015892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mrkudt.za.com",nocase; classtype:attempted-recon; sid:200015893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mtedjn.za.com",nocase; classtype:attempted-recon; sid:200015894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mxfqsm.za.com",nocase; classtype:attempted-recon; sid:200015895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.mxphbq.za.com",nocase; classtype:attempted-recon; sid:200015896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ngdpig.za.com",nocase; classtype:attempted-recon; sid:200015897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.nijizu.za.com",nocase; classtype:attempted-recon; sid:200015898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.njjguj.za.com",nocase; classtype:attempted-recon; sid:200015899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.nkmpia.za.com",nocase; classtype:attempted-recon; sid:200015900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.nmdzpk.za.com",nocase; classtype:attempted-recon; sid:200015901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.noegdn.za.com",nocase; classtype:attempted-recon; sid:200015902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.npxbmj.za.com",nocase; classtype:attempted-recon; sid:200015903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.nscrlf.za.com",nocase; classtype:attempted-recon; sid:200015904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.nywlkd.za.com",nocase; classtype:attempted-recon; sid:200015905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.nzuvrz.za.com",nocase; classtype:attempted-recon; sid:200015906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.oaotso.za.com",nocase; classtype:attempted-recon; sid:200015907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.odgjer.za.com",nocase; classtype:attempted-recon; sid:200015908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.odmvmd.za.com",nocase; classtype:attempted-recon; sid:200015909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.oexeuz.za.com",nocase; classtype:attempted-recon; sid:200015910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ohmvcj.za.com",nocase; classtype:attempted-recon; sid:200015911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ohssdh.za.com",nocase; classtype:attempted-recon; sid:200015912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.oijbuk.za.com",nocase; classtype:attempted-recon; sid:200015913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.okzwyp.za.com",nocase; classtype:attempted-recon; sid:200015914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.olgmmh.za.com",nocase; classtype:attempted-recon; sid:200015915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.orrpya.za.com",nocase; classtype:attempted-recon; sid:200015916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.osoqzr.za.com",nocase; classtype:attempted-recon; sid:200015917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.oudyit.za.com",nocase; classtype:attempted-recon; sid:200015918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.pdkuld.za.com",nocase; classtype:attempted-recon; sid:200015919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.puzdqh.za.com",nocase; classtype:attempted-recon; sid:200015920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.qfdotp.za.com",nocase; classtype:attempted-recon; sid:200015921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.qvfwma.za.com",nocase; classtype:attempted-recon; sid:200015922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.qwnduy.za.com",nocase; classtype:attempted-recon; sid:200015923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.rclyhu.za.com",nocase; classtype:attempted-recon; sid:200015924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.reaqos.za.com",nocase; classtype:attempted-recon; sid:200015925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.rhbvvz.za.com",nocase; classtype:attempted-recon; sid:200015926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.rhfwsh.za.com",nocase; classtype:attempted-recon; sid:200015927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.rhovtm.za.com",nocase; classtype:attempted-recon; sid:200015928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.rijenl.za.com",nocase; classtype:attempted-recon; sid:200015929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.rmpemt.za.com",nocase; classtype:attempted-recon; sid:200015930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.rmzoht.za.com",nocase; classtype:attempted-recon; sid:200015931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.rooreg.za.com",nocase; classtype:attempted-recon; sid:200015932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.rplout.za.com",nocase; classtype:attempted-recon; sid:200015933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.rsnklt.za.com",nocase; classtype:attempted-recon; sid:200015934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.rsuwkc.za.com",nocase; classtype:attempted-recon; sid:200015935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.rujjog.za.com",nocase; classtype:attempted-recon; sid:200015936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ryqtlk.za.com",nocase; classtype:attempted-recon; sid:200015937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.rzkyqg.za.com",nocase; classtype:attempted-recon; sid:200015938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.scqqle.za.com",nocase; classtype:attempted-recon; sid:200015939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.snmrey.za.com",nocase; classtype:attempted-recon; sid:200015940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.sqmnsg.za.com",nocase; classtype:attempted-recon; sid:200015941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.srlqyc.za.com",nocase; classtype:attempted-recon; sid:200015942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.sztsok.za.com",nocase; classtype:attempted-recon; sid:200015943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.tayped.za.com",nocase; classtype:attempted-recon; sid:200015944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.tcpzfk.za.com",nocase; classtype:attempted-recon; sid:200015945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.tcrzzp.za.com",nocase; classtype:attempted-recon; sid:200015946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.tlxfsd.za.com",nocase; classtype:attempted-recon; sid:200015947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.tmybve.za.com",nocase; classtype:attempted-recon; sid:200015948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.twbvyf.za.com",nocase; classtype:attempted-recon; sid:200015949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.tztcbk.za.com",nocase; classtype:attempted-recon; sid:200015950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ufrjqp.za.com",nocase; classtype:attempted-recon; sid:200015951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.uhtsna.za.com",nocase; classtype:attempted-recon; sid:200015952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.uhuhey.za.com",nocase; classtype:attempted-recon; sid:200015953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.uiiavd.za.com",nocase; classtype:attempted-recon; sid:200015954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.umfbax.za.com",nocase; classtype:attempted-recon; sid:200015955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.uopoem.za.com",nocase; classtype:attempted-recon; sid:200015956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.urcrba.za.com",nocase; classtype:attempted-recon; sid:200015957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.uyyfoa.za.com",nocase; classtype:attempted-recon; sid:200015958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.vdobfv.za.com",nocase; classtype:attempted-recon; sid:200015959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.virtxq.za.com",nocase; classtype:attempted-recon; sid:200015960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.vjwefx.za.com",nocase; classtype:attempted-recon; sid:200015961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.vwprmh.za.com",nocase; classtype:attempted-recon; sid:200015962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.wbuilk.za.com",nocase; classtype:attempted-recon; sid:200015963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.wdmxau.za.com",nocase; classtype:attempted-recon; sid:200015964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.woddlo.za.com",nocase; classtype:attempted-recon; sid:200015965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.wposkr.za.com",nocase; classtype:attempted-recon; sid:200015966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.wpzqcb.za.com",nocase; classtype:attempted-recon; sid:200015967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.wstujx.za.com",nocase; classtype:attempted-recon; sid:200015968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.wvpeyp.za.com",nocase; classtype:attempted-recon; sid:200015969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.wzqpee.za.com",nocase; classtype:attempted-recon; sid:200015970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.xbdhbi.za.com",nocase; classtype:attempted-recon; sid:200015971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.xfwrde.za.com",nocase; classtype:attempted-recon; sid:200015972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.xnbziz.za.com",nocase; classtype:attempted-recon; sid:200015973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.xpyewd.za.com",nocase; classtype:attempted-recon; sid:200015974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.yilvza.za.com",nocase; classtype:attempted-recon; sid:200015975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ymewff.za.com",nocase; classtype:attempted-recon; sid:200015976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.ynuzpu.za.com",nocase; classtype:attempted-recon; sid:200015977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.yptwya.za.com",nocase; classtype:attempted-recon; sid:200015978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.yqszfl.za.com",nocase; classtype:attempted-recon; sid:200015979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.yvgrja.za.com",nocase; classtype:attempted-recon; sid:200015980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicuivisonaurueszovvseon.vscenssioriursi.zzwuas.za.com",nocase; classtype:attempted-recon; sid:200015981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.exrjwh.top",nocase; classtype:attempted-recon; sid:200015982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.exxnjv.top",nocase; classtype:attempted-recon; sid:200015983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.fbgnzp.top",nocase; classtype:attempted-recon; sid:200015984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.fgmlde.top",nocase; classtype:attempted-recon; sid:200015985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.fiwzrb.top",nocase; classtype:attempted-recon; sid:200015986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.fpezfd.top",nocase; classtype:attempted-recon; sid:200015987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.fprrlq.top",nocase; classtype:attempted-recon; sid:200015988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.frhyqg.top",nocase; classtype:attempted-recon; sid:200015989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.fshxqm.top",nocase; classtype:attempted-recon; sid:200015990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.fynqxp.top",nocase; classtype:attempted-recon; sid:200015991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.fzcftf.top",nocase; classtype:attempted-recon; sid:200015992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.fzfweo.top",nocase; classtype:attempted-recon; sid:200015993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.gbbxdr.top",nocase; classtype:attempted-recon; sid:200015994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.ghdbbh.top",nocase; classtype:attempted-recon; sid:200015995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.ghqphy.top",nocase; classtype:attempted-recon; sid:200015996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.gjrbgg.top",nocase; classtype:attempted-recon; sid:200015997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.grliwz.top",nocase; classtype:attempted-recon; sid:200015998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.gtfvze.top",nocase; classtype:attempted-recon; sid:200015999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.guxqvw.top",nocase; classtype:attempted-recon; sid:200016000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.gyaexz.top",nocase; classtype:attempted-recon; sid:200016001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.hgpqys.top",nocase; classtype:attempted-recon; sid:200016002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.hhksfr.top",nocase; classtype:attempted-recon; sid:200016003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.iktggq.top",nocase; classtype:attempted-recon; sid:200016004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.ilgzng.top",nocase; classtype:attempted-recon; sid:200016005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.irllcd.top",nocase; classtype:attempted-recon; sid:200016006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.iuruyp.top",nocase; classtype:attempted-recon; sid:200016007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.jdjubw.top",nocase; classtype:attempted-recon; sid:200016008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.jfmfyj.top",nocase; classtype:attempted-recon; sid:200016009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.jubsfg.top",nocase; classtype:attempted-recon; sid:200016010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.jxavqz.top",nocase; classtype:attempted-recon; sid:200016011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.jxsfsm.top",nocase; classtype:attempted-recon; sid:200016012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.klgjib.top",nocase; classtype:attempted-recon; sid:200016013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.kqstye.top",nocase; classtype:attempted-recon; sid:200016014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.kvtvic.top",nocase; classtype:attempted-recon; sid:200016015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.kxcepn.top",nocase; classtype:attempted-recon; sid:200016016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.lhewuf.top",nocase; classtype:attempted-recon; sid:200016017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.ljsifw.top",nocase; classtype:attempted-recon; sid:200016018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.lsztbg.top",nocase; classtype:attempted-recon; sid:200016019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.ltineb.top",nocase; classtype:attempted-recon; sid:200016020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.lwxxqk.top",nocase; classtype:attempted-recon; sid:200016021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.mdaxpz.top",nocase; classtype:attempted-recon; sid:200016022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.mddqbt.top",nocase; classtype:attempted-recon; sid:200016023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.mgandi.top",nocase; classtype:attempted-recon; sid:200016024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.mhgmuo.top",nocase; classtype:attempted-recon; sid:200016025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.mhnved.top",nocase; classtype:attempted-recon; sid:200016026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.mhxoyr.top",nocase; classtype:attempted-recon; sid:200016027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.mmcqln.top",nocase; classtype:attempted-recon; sid:200016028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.mravkx.top",nocase; classtype:attempted-recon; sid:200016029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.munzdr.top",nocase; classtype:attempted-recon; sid:200016030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.mwquzc.top",nocase; classtype:attempted-recon; sid:200016031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.mzrkkc.top",nocase; classtype:attempted-recon; sid:200016032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.najkys.top",nocase; classtype:attempted-recon; sid:200016033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.nbhlvc.top",nocase; classtype:attempted-recon; sid:200016034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.neidee.top",nocase; classtype:attempted-recon; sid:200016035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.njhpgs.top",nocase; classtype:attempted-recon; sid:200016036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.nmbqjh.top",nocase; classtype:attempted-recon; sid:200016037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.ntlhha.top",nocase; classtype:attempted-recon; sid:200016038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.nxuiqz.top",nocase; classtype:attempted-recon; sid:200016039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.nyzjio.top",nocase; classtype:attempted-recon; sid:200016040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.ojvntr.top",nocase; classtype:attempted-recon; sid:200016041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.owqbbi.top",nocase; classtype:attempted-recon; sid:200016042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.oycpxz.top",nocase; classtype:attempted-recon; sid:200016043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.pbkjie.top",nocase; classtype:attempted-recon; sid:200016044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.pdndft.top",nocase; classtype:attempted-recon; sid:200016045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.pgltrg.top",nocase; classtype:attempted-recon; sid:200016046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.pgwcxp.top",nocase; classtype:attempted-recon; sid:200016047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.plqjhl.top",nocase; classtype:attempted-recon; sid:200016048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.poaixv.top",nocase; classtype:attempted-recon; sid:200016049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.pwnccs.top",nocase; classtype:attempted-recon; sid:200016050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.pxnctk.top",nocase; classtype:attempted-recon; sid:200016051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.pyseum.top",nocase; classtype:attempted-recon; sid:200016052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.pysitg.top",nocase; classtype:attempted-recon; sid:200016053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.qboxjl.top",nocase; classtype:attempted-recon; sid:200016054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.qjtfvg.top",nocase; classtype:attempted-recon; sid:200016055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.qnomqo.top",nocase; classtype:attempted-recon; sid:200016056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.qwudnh.top",nocase; classtype:attempted-recon; sid:200016057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.rataxm.top",nocase; classtype:attempted-recon; sid:200016058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.rchahv.top",nocase; classtype:attempted-recon; sid:200016059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.rhirhw.top",nocase; classtype:attempted-recon; sid:200016060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.rhwdsq.top",nocase; classtype:attempted-recon; sid:200016061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.rjfbqi.top",nocase; classtype:attempted-recon; sid:200016062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.rkafro.top",nocase; classtype:attempted-recon; sid:200016063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.exrjwh.top",nocase; classtype:attempted-recon; sid:200016064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.exxnjv.top",nocase; classtype:attempted-recon; sid:200016065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.fgmlde.top",nocase; classtype:attempted-recon; sid:200016066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.fiwzrb.top",nocase; classtype:attempted-recon; sid:200016067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.fpezfd.top",nocase; classtype:attempted-recon; sid:200016068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.fprrlq.top",nocase; classtype:attempted-recon; sid:200016069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.frhyqg.top",nocase; classtype:attempted-recon; sid:200016070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.fshxqm.top",nocase; classtype:attempted-recon; sid:200016071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.fzcftf.top",nocase; classtype:attempted-recon; sid:200016072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.fzfweo.top",nocase; classtype:attempted-recon; sid:200016073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.gbbxdr.top",nocase; classtype:attempted-recon; sid:200016074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.ghqphy.top",nocase; classtype:attempted-recon; sid:200016075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.gjrbgg.top",nocase; classtype:attempted-recon; sid:200016076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.grliwz.top",nocase; classtype:attempted-recon; sid:200016077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.gtfvze.top",nocase; classtype:attempted-recon; sid:200016078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.gyaexz.top",nocase; classtype:attempted-recon; sid:200016079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.hgpqys.top",nocase; classtype:attempted-recon; sid:200016080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.hhksfr.top",nocase; classtype:attempted-recon; sid:200016081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.iktggq.top",nocase; classtype:attempted-recon; sid:200016082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.ilpzgr.top",nocase; classtype:attempted-recon; sid:200016083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.irllcd.top",nocase; classtype:attempted-recon; sid:200016084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.iuruyp.top",nocase; classtype:attempted-recon; sid:200016085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.jdjubw.top",nocase; classtype:attempted-recon; sid:200016086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.jfmfyj.top",nocase; classtype:attempted-recon; sid:200016087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.jxavqz.top",nocase; classtype:attempted-recon; sid:200016088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.jxsfsm.top",nocase; classtype:attempted-recon; sid:200016089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.klgjib.top",nocase; classtype:attempted-recon; sid:200016090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.kqdghn.top",nocase; classtype:attempted-recon; sid:200016091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.ksdadl.top",nocase; classtype:attempted-recon; sid:200016092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.kxcepn.top",nocase; classtype:attempted-recon; sid:200016093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.laeyhc.top",nocase; classtype:attempted-recon; sid:200016094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.lhewuf.top",nocase; classtype:attempted-recon; sid:200016095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.ljsifw.top",nocase; classtype:attempted-recon; sid:200016096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.lrtzrp.top",nocase; classtype:attempted-recon; sid:200016097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.lsztbg.top",nocase; classtype:attempted-recon; sid:200016098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.ltineb.top",nocase; classtype:attempted-recon; sid:200016099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.lwxxqk.top",nocase; classtype:attempted-recon; sid:200016100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.mcbprf.top",nocase; classtype:attempted-recon; sid:200016101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.mdaxpz.top",nocase; classtype:attempted-recon; sid:200016102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.mddqbt.top",nocase; classtype:attempted-recon; sid:200016103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.mgandi.top",nocase; classtype:attempted-recon; sid:200016104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.mhnved.top",nocase; classtype:attempted-recon; sid:200016105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.mhxoyr.top",nocase; classtype:attempted-recon; sid:200016106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.mravkx.top",nocase; classtype:attempted-recon; sid:200016107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.munzdr.top",nocase; classtype:attempted-recon; sid:200016108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.mwquzc.top",nocase; classtype:attempted-recon; sid:200016109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.mzrkkc.top",nocase; classtype:attempted-recon; sid:200016110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.nbhlvc.top",nocase; classtype:attempted-recon; sid:200016111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.neidee.top",nocase; classtype:attempted-recon; sid:200016112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.ngtwxt.top",nocase; classtype:attempted-recon; sid:200016113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.njhpgs.top",nocase; classtype:attempted-recon; sid:200016114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.nmbqjh.top",nocase; classtype:attempted-recon; sid:200016115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.ntlhha.top",nocase; classtype:attempted-recon; sid:200016116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.nxuiqz.top",nocase; classtype:attempted-recon; sid:200016117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.nyzjio.top",nocase; classtype:attempted-recon; sid:200016118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.ofburn.top",nocase; classtype:attempted-recon; sid:200016119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.ohmatb.top",nocase; classtype:attempted-recon; sid:200016120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.ojvntr.top",nocase; classtype:attempted-recon; sid:200016121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.osqsyc.top",nocase; classtype:attempted-recon; sid:200016122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.oycpxz.top",nocase; classtype:attempted-recon; sid:200016123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.pbkjie.top",nocase; classtype:attempted-recon; sid:200016124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.pdndft.top",nocase; classtype:attempted-recon; sid:200016125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.pgwcxp.top",nocase; classtype:attempted-recon; sid:200016126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.plqjhl.top",nocase; classtype:attempted-recon; sid:200016127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.poaixv.top",nocase; classtype:attempted-recon; sid:200016128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.pqpcgk.top",nocase; classtype:attempted-recon; sid:200016129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.pwnccs.top",nocase; classtype:attempted-recon; sid:200016130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.pxnctk.top",nocase; classtype:attempted-recon; sid:200016131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.pyseum.top",nocase; classtype:attempted-recon; sid:200016132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.pysitg.top",nocase; classtype:attempted-recon; sid:200016133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.qboxjl.top",nocase; classtype:attempted-recon; sid:200016134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.qnomqo.top",nocase; classtype:attempted-recon; sid:200016135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.qwudnh.top",nocase; classtype:attempted-recon; sid:200016136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.rataxm.top",nocase; classtype:attempted-recon; sid:200016137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.rchahv.top",nocase; classtype:attempted-recon; sid:200016138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.rhirhw.top",nocase; classtype:attempted-recon; sid:200016139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.rhwdsq.top",nocase; classtype:attempted-recon; sid:200016140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.rjfbqi.top",nocase; classtype:attempted-recon; sid:200016141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.rkafro.top",nocase; classtype:attempted-recon; sid:200016142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.exrjwh.top",nocase; classtype:attempted-recon; sid:200016143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.exxnjv.top",nocase; classtype:attempted-recon; sid:200016144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.fbgnzp.top",nocase; classtype:attempted-recon; sid:200016145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.fgmlde.top",nocase; classtype:attempted-recon; sid:200016146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.fiwzrb.top",nocase; classtype:attempted-recon; sid:200016147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.fpezfd.top",nocase; classtype:attempted-recon; sid:200016148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.fprrlq.top",nocase; classtype:attempted-recon; sid:200016149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.frhyqg.top",nocase; classtype:attempted-recon; sid:200016150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.fshxqm.top",nocase; classtype:attempted-recon; sid:200016151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.fynqxp.top",nocase; classtype:attempted-recon; sid:200016152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.fzcftf.top",nocase; classtype:attempted-recon; sid:200016153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.fzfweo.top",nocase; classtype:attempted-recon; sid:200016154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.gbbxdr.top",nocase; classtype:attempted-recon; sid:200016155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.ghdbbh.top",nocase; classtype:attempted-recon; sid:200016156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.ghqphy.top",nocase; classtype:attempted-recon; sid:200016157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.gjrbgg.top",nocase; classtype:attempted-recon; sid:200016158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.gtfvze.top",nocase; classtype:attempted-recon; sid:200016159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.guxqvw.top",nocase; classtype:attempted-recon; sid:200016160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.hgpqys.top",nocase; classtype:attempted-recon; sid:200016161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.hhksfr.top",nocase; classtype:attempted-recon; sid:200016162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.iktggq.top",nocase; classtype:attempted-recon; sid:200016163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.ilgzng.top",nocase; classtype:attempted-recon; sid:200016164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.ilpzgr.top",nocase; classtype:attempted-recon; sid:200016165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.irllcd.top",nocase; classtype:attempted-recon; sid:200016166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.iuruyp.top",nocase; classtype:attempted-recon; sid:200016167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.jubsfg.top",nocase; classtype:attempted-recon; sid:200016168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.jxavqz.top",nocase; classtype:attempted-recon; sid:200016169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.jxsfsm.top",nocase; classtype:attempted-recon; sid:200016170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.klgjib.top",nocase; classtype:attempted-recon; sid:200016171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.klvjnr.top",nocase; classtype:attempted-recon; sid:200016172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.kqdghn.top",nocase; classtype:attempted-recon; sid:200016173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.ksdadl.top",nocase; classtype:attempted-recon; sid:200016174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.kvtvic.top",nocase; classtype:attempted-recon; sid:200016175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.kxcepn.top",nocase; classtype:attempted-recon; sid:200016176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.laeyhc.top",nocase; classtype:attempted-recon; sid:200016177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.lhewuf.top",nocase; classtype:attempted-recon; sid:200016178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.ljsifw.top",nocase; classtype:attempted-recon; sid:200016179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.lrtzrp.top",nocase; classtype:attempted-recon; sid:200016180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.lsztbg.top",nocase; classtype:attempted-recon; sid:200016181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.ltineb.top",nocase; classtype:attempted-recon; sid:200016182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.lwxxqk.top",nocase; classtype:attempted-recon; sid:200016183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.mcbprf.top",nocase; classtype:attempted-recon; sid:200016184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.mddqbt.top",nocase; classtype:attempted-recon; sid:200016185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.mgandi.top",nocase; classtype:attempted-recon; sid:200016186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.mhgmuo.top",nocase; classtype:attempted-recon; sid:200016187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.mhnved.top",nocase; classtype:attempted-recon; sid:200016188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.mhxoyr.top",nocase; classtype:attempted-recon; sid:200016189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.mmcqln.top",nocase; classtype:attempted-recon; sid:200016190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.mravkx.top",nocase; classtype:attempted-recon; sid:200016191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.munzdr.top",nocase; classtype:attempted-recon; sid:200016192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.mwquzc.top",nocase; classtype:attempted-recon; sid:200016193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.mzrkkc.top",nocase; classtype:attempted-recon; sid:200016194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.najkys.top",nocase; classtype:attempted-recon; sid:200016195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.nbhlvc.top",nocase; classtype:attempted-recon; sid:200016196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.neidee.top",nocase; classtype:attempted-recon; sid:200016197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.ngtwxt.top",nocase; classtype:attempted-recon; sid:200016198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.njhpgs.top",nocase; classtype:attempted-recon; sid:200016199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.nmbqjh.top",nocase; classtype:attempted-recon; sid:200016200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.ntlhha.top",nocase; classtype:attempted-recon; sid:200016201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.nyzjio.top",nocase; classtype:attempted-recon; sid:200016202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.ofburn.top",nocase; classtype:attempted-recon; sid:200016203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.ojvntr.top",nocase; classtype:attempted-recon; sid:200016204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.oycpxz.top",nocase; classtype:attempted-recon; sid:200016205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.pbkjie.top",nocase; classtype:attempted-recon; sid:200016206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.pdndft.top",nocase; classtype:attempted-recon; sid:200016207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.pgltrg.top",nocase; classtype:attempted-recon; sid:200016208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.pgwcxp.top",nocase; classtype:attempted-recon; sid:200016209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.plqjhl.top",nocase; classtype:attempted-recon; sid:200016210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.poaixv.top",nocase; classtype:attempted-recon; sid:200016211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.pqpcgk.top",nocase; classtype:attempted-recon; sid:200016212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.pwnccs.top",nocase; classtype:attempted-recon; sid:200016213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.pxnctk.top",nocase; classtype:attempted-recon; sid:200016214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.pyseum.top",nocase; classtype:attempted-recon; sid:200016215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.pysitg.top",nocase; classtype:attempted-recon; sid:200016216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.qboxjl.top",nocase; classtype:attempted-recon; sid:200016217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.qjtfvg.top",nocase; classtype:attempted-recon; sid:200016218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.qnomqo.top",nocase; classtype:attempted-recon; sid:200016219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.qwudnh.top",nocase; classtype:attempted-recon; sid:200016220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.rataxm.top",nocase; classtype:attempted-recon; sid:200016221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.rhirhw.top",nocase; classtype:attempted-recon; sid:200016222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.rhwdsq.top",nocase; classtype:attempted-recon; sid:200016223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.rkafro.top",nocase; classtype:attempted-recon; sid:200016224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.exrjwh.top",nocase; classtype:attempted-recon; sid:200016225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.fbgnzp.top",nocase; classtype:attempted-recon; sid:200016226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.fgmlde.top",nocase; classtype:attempted-recon; sid:200016227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.fiwzrb.top",nocase; classtype:attempted-recon; sid:200016228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.fpezfd.top",nocase; classtype:attempted-recon; sid:200016229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.fprrlq.top",nocase; classtype:attempted-recon; sid:200016230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.frhyqg.top",nocase; classtype:attempted-recon; sid:200016231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.fshxqm.top",nocase; classtype:attempted-recon; sid:200016232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.fynqxp.top",nocase; classtype:attempted-recon; sid:200016233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.fzcftf.top",nocase; classtype:attempted-recon; sid:200016234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.fzfweo.top",nocase; classtype:attempted-recon; sid:200016235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.gbbxdr.top",nocase; classtype:attempted-recon; sid:200016236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.ghdbbh.top",nocase; classtype:attempted-recon; sid:200016237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.ghqphy.top",nocase; classtype:attempted-recon; sid:200016238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.grliwz.top",nocase; classtype:attempted-recon; sid:200016239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.gtfvze.top",nocase; classtype:attempted-recon; sid:200016240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.guxqvw.top",nocase; classtype:attempted-recon; sid:200016241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.gyaexz.top",nocase; classtype:attempted-recon; sid:200016242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.hgpqys.top",nocase; classtype:attempted-recon; sid:200016243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.hhksfr.top",nocase; classtype:attempted-recon; sid:200016244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.iktggq.top",nocase; classtype:attempted-recon; sid:200016245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.ilgzng.top",nocase; classtype:attempted-recon; sid:200016246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.ilpzgr.top",nocase; classtype:attempted-recon; sid:200016247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.iuruyp.top",nocase; classtype:attempted-recon; sid:200016248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.jdjubw.top",nocase; classtype:attempted-recon; sid:200016249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.jfmfyj.top",nocase; classtype:attempted-recon; sid:200016250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.jubsfg.top",nocase; classtype:attempted-recon; sid:200016251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.jxavqz.top",nocase; classtype:attempted-recon; sid:200016252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.jxsfsm.top",nocase; classtype:attempted-recon; sid:200016253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.klgjib.top",nocase; classtype:attempted-recon; sid:200016254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.klvjnr.top",nocase; classtype:attempted-recon; sid:200016255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.kqdghn.top",nocase; classtype:attempted-recon; sid:200016256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.kqstye.top",nocase; classtype:attempted-recon; sid:200016257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.kvtvic.top",nocase; classtype:attempted-recon; sid:200016258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.kxcepn.top",nocase; classtype:attempted-recon; sid:200016259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.lhewuf.top",nocase; classtype:attempted-recon; sid:200016260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.ljsifw.top",nocase; classtype:attempted-recon; sid:200016261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.lrtzrp.top",nocase; classtype:attempted-recon; sid:200016262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.lsztbg.top",nocase; classtype:attempted-recon; sid:200016263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.ltineb.top",nocase; classtype:attempted-recon; sid:200016264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.lwxxqk.top",nocase; classtype:attempted-recon; sid:200016265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.mdaxpz.top",nocase; classtype:attempted-recon; sid:200016266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.mddqbt.top",nocase; classtype:attempted-recon; sid:200016267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.mhgmuo.top",nocase; classtype:attempted-recon; sid:200016268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.mhnved.top",nocase; classtype:attempted-recon; sid:200016269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.mhxoyr.top",nocase; classtype:attempted-recon; sid:200016270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.mmcqln.top",nocase; classtype:attempted-recon; sid:200016271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.munzdr.top",nocase; classtype:attempted-recon; sid:200016272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.mwquzc.top",nocase; classtype:attempted-recon; sid:200016273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.mzrkkc.top",nocase; classtype:attempted-recon; sid:200016274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.najkys.top",nocase; classtype:attempted-recon; sid:200016275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.nbhlvc.top",nocase; classtype:attempted-recon; sid:200016276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.neidee.top",nocase; classtype:attempted-recon; sid:200016277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.ngtwxt.top",nocase; classtype:attempted-recon; sid:200016278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.njhpgs.top",nocase; classtype:attempted-recon; sid:200016279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.nmbqjh.top",nocase; classtype:attempted-recon; sid:200016280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.ntlhha.top",nocase; classtype:attempted-recon; sid:200016281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.nyzjio.top",nocase; classtype:attempted-recon; sid:200016282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.ofburn.top",nocase; classtype:attempted-recon; sid:200016283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.ohmatb.top",nocase; classtype:attempted-recon; sid:200016284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.ojvntr.top",nocase; classtype:attempted-recon; sid:200016285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.opyxhy.top",nocase; classtype:attempted-recon; sid:200016286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.osqsyc.top",nocase; classtype:attempted-recon; sid:200016287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.owqbbi.top",nocase; classtype:attempted-recon; sid:200016288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.oycpxz.top",nocase; classtype:attempted-recon; sid:200016289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.pbkjie.top",nocase; classtype:attempted-recon; sid:200016290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.pdndft.top",nocase; classtype:attempted-recon; sid:200016291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.pgltrg.top",nocase; classtype:attempted-recon; sid:200016292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.pgwcxp.top",nocase; classtype:attempted-recon; sid:200016293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.plqjhl.top",nocase; classtype:attempted-recon; sid:200016294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.poaixv.top",nocase; classtype:attempted-recon; sid:200016295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.pqpcgk.top",nocase; classtype:attempted-recon; sid:200016296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.pwnccs.top",nocase; classtype:attempted-recon; sid:200016297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.pxnctk.top",nocase; classtype:attempted-recon; sid:200016298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.pyseum.top",nocase; classtype:attempted-recon; sid:200016299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.pysitg.top",nocase; classtype:attempted-recon; sid:200016300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.qboxjl.top",nocase; classtype:attempted-recon; sid:200016301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.qjtfvg.top",nocase; classtype:attempted-recon; sid:200016302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.qwudnh.top",nocase; classtype:attempted-recon; sid:200016303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.rataxm.top",nocase; classtype:attempted-recon; sid:200016304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.rchahv.top",nocase; classtype:attempted-recon; sid:200016305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.rhirhw.top",nocase; classtype:attempted-recon; sid:200016306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.rhwdsq.top",nocase; classtype:attempted-recon; sid:200016307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.rjfbqi.top",nocase; classtype:attempted-recon; sid:200016308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.rkafro.top",nocase; classtype:attempted-recon; sid:200016309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.afevzf.top",nocase; classtype:attempted-recon; sid:200016310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200016311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200016312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200016313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.balaet.icu",nocase; classtype:attempted-recon; sid:200016314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200016315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200016316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200016317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.bporry.top",nocase; classtype:attempted-recon; sid:200016318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.bspybm.top",nocase; classtype:attempted-recon; sid:200016319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200016320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200016321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200016322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200016323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200016324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.cntxao.top",nocase; classtype:attempted-recon; sid:200016325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200016326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.craycraft.top",nocase; classtype:attempted-recon; sid:200016327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.cwadib.top",nocase; classtype:attempted-recon; sid:200016328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200016329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200016330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.dauexk.top",nocase; classtype:attempted-recon; sid:200016331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200016332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200016333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200016334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200016335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200016336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200016337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.elhicw.top",nocase; classtype:attempted-recon; sid:200016338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200016339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200016340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.exoysm.top",nocase; classtype:attempted-recon; sid:200016341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200016342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200016343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200016344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200016345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200016346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200016347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200016348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200016349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.iooazb.top",nocase; classtype:attempted-recon; sid:200016350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200016351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200016352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200016353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.kpblio.top",nocase; classtype:attempted-recon; sid:200016354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.lenorv.top",nocase; classtype:attempted-recon; sid:200016355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200016356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200016357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200016358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.pkilix.top",nocase; classtype:attempted-recon; sid:200016359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200016360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200016361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200016362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200016363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.ronipp.top",nocase; classtype:attempted-recon; sid:200016364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200016365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200016366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200016367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200016368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200016369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200016370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.shaot.icu",nocase; classtype:attempted-recon; sid:200016371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200016372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200016373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200016374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200016375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200016376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200016377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.ufihby.top",nocase; classtype:attempted-recon; sid:200016378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.upuphone.group",nocase; classtype:attempted-recon; sid:200016379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.urekwh.top",nocase; classtype:attempted-recon; sid:200016380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200016381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200016382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.wbziul.top",nocase; classtype:attempted-recon; sid:200016383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200016384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200016385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.wetot.life",nocase; classtype:attempted-recon; sid:200016386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200016387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.wingfh.top",nocase; classtype:attempted-recon; sid:200016388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200016389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200016390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200016391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200016392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.xudixq.top",nocase; classtype:attempted-recon; sid:200016393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200016394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.yavkol.top",nocase; classtype:attempted-recon; sid:200016395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200016396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200016397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200016398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200016399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200016400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200016401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200016402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.znegsr.top",nocase; classtype:attempted-recon; sid:200016403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.zynepg.top",nocase; classtype:attempted-recon; sid:200016404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.afevzf.top",nocase; classtype:attempted-recon; sid:200016405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200016406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200016407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200016408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.balaet.icu",nocase; classtype:attempted-recon; sid:200016409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200016410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200016411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200016412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.bporry.top",nocase; classtype:attempted-recon; sid:200016413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.bspybm.top",nocase; classtype:attempted-recon; sid:200016414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200016415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200016416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200016417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200016418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200016419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.cntxao.top",nocase; classtype:attempted-recon; sid:200016420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.coflya.top",nocase; classtype:attempted-recon; sid:200016421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200016422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.craycraft.top",nocase; classtype:attempted-recon; sid:200016423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.cwadib.top",nocase; classtype:attempted-recon; sid:200016424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200016425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200016426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.dauexk.top",nocase; classtype:attempted-recon; sid:200016427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200016428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200016429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200016430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200016431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200016432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200016433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200016434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200016435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200016436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.exoysm.top",nocase; classtype:attempted-recon; sid:200016437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200016438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200016439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200016440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200016441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200016442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200016443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200016444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200016445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200016446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200016447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200016448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200016449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.kpblio.top",nocase; classtype:attempted-recon; sid:200016450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.lenorv.top",nocase; classtype:attempted-recon; sid:200016451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200016452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200016453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200016454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.pkilix.top",nocase; classtype:attempted-recon; sid:200016455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200016456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200016457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200016458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.ronipp.top",nocase; classtype:attempted-recon; sid:200016459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200016460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200016461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200016462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200016463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200016464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.shaot.icu",nocase; classtype:attempted-recon; sid:200016465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200016466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200016467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200016468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200016469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200016470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200016471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.ufihby.top",nocase; classtype:attempted-recon; sid:200016472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.upuphone.group",nocase; classtype:attempted-recon; sid:200016473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200016474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.urekwh.top",nocase; classtype:attempted-recon; sid:200016475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200016476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.vozep.icu",nocase; classtype:attempted-recon; sid:200016477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200016478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200016479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.wetot.icu",nocase; classtype:attempted-recon; sid:200016480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.wetot.life",nocase; classtype:attempted-recon; sid:200016481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200016482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.wingfh.top",nocase; classtype:attempted-recon; sid:200016483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200016484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200016485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200016486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200016487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200016488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.xudixq.top",nocase; classtype:attempted-recon; sid:200016489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200016490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200016491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200016492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.yavkol.top",nocase; classtype:attempted-recon; sid:200016493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200016494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200016495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200016496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200016497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200016498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.znegsr.top",nocase; classtype:attempted-recon; sid:200016499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.02vk.top",nocase; classtype:attempted-recon; sid:200016500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200016501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.afevzf.top",nocase; classtype:attempted-recon; sid:200016502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200016503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200016504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.balaet.icu",nocase; classtype:attempted-recon; sid:200016505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200016506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200016507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.bporry.top",nocase; classtype:attempted-recon; sid:200016508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.bspybm.top",nocase; classtype:attempted-recon; sid:200016509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200016510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200016511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200016512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200016513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200016514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.cntxao.top",nocase; classtype:attempted-recon; sid:200016515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.coflya.top",nocase; classtype:attempted-recon; sid:200016516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200016517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.craycraft.top",nocase; classtype:attempted-recon; sid:200016518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.cwadib.top",nocase; classtype:attempted-recon; sid:200016519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200016520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200016521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.dauexk.top",nocase; classtype:attempted-recon; sid:200016522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200016523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200016524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200016525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200016526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200016527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200016528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200016529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.elhicw.top",nocase; classtype:attempted-recon; sid:200016530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200016531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200016532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.exoysm.top",nocase; classtype:attempted-recon; sid:200016533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200016534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200016535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200016536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200016537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200016538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200016539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200016540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200016541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.iooazb.top",nocase; classtype:attempted-recon; sid:200016542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200016543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200016544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200016545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200016546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.kpblio.top",nocase; classtype:attempted-recon; sid:200016547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200016548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200016549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200016550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.pkilix.top",nocase; classtype:attempted-recon; sid:200016551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200016552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200016553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200016554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200016555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.ronipp.top",nocase; classtype:attempted-recon; sid:200016556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200016557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200016558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200016559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200016560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.shaot.icu",nocase; classtype:attempted-recon; sid:200016561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200016562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200016563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200016564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200016565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200016566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200016567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.ufihby.top",nocase; classtype:attempted-recon; sid:200016568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.upuphone.group",nocase; classtype:attempted-recon; sid:200016569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.urekwh.top",nocase; classtype:attempted-recon; sid:200016570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200016571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.vozep.icu",nocase; classtype:attempted-recon; sid:200016572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200016573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.wbziul.top",nocase; classtype:attempted-recon; sid:200016574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200016575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200016576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.wetot.life",nocase; classtype:attempted-recon; sid:200016577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200016578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.wingfh.top",nocase; classtype:attempted-recon; sid:200016579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200016580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200016581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200016582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200016583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.xudixq.top",nocase; classtype:attempted-recon; sid:200016584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200016585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200016586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200016587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.yavkol.top",nocase; classtype:attempted-recon; sid:200016588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200016589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200016590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200016591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200016592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200016593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.znegsr.top",nocase; classtype:attempted-recon; sid:200016594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.zynepg.top",nocase; classtype:attempted-recon; sid:200016595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.02vk.top",nocase; classtype:attempted-recon; sid:200016596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.afevzf.top",nocase; classtype:attempted-recon; sid:200016597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200016598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200016599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200016600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.balaet.icu",nocase; classtype:attempted-recon; sid:200016601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200016602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200016603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200016604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.bporry.top",nocase; classtype:attempted-recon; sid:200016605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.bspybm.top",nocase; classtype:attempted-recon; sid:200016606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200016607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200016608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200016609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200016610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200016611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.cntxao.top",nocase; classtype:attempted-recon; sid:200016612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.coflya.top",nocase; classtype:attempted-recon; sid:200016613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.craycraft.top",nocase; classtype:attempted-recon; sid:200016614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200016615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200016616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.dauexk.top",nocase; classtype:attempted-recon; sid:200016617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200016618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200016619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200016620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200016621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200016622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200016623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200016624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200016625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200016626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.elhicw.top",nocase; classtype:attempted-recon; sid:200016627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200016628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200016629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.exoysm.top",nocase; classtype:attempted-recon; sid:200016630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200016631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200016632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200016633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200016634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200016635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200016636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200016637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200016638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.iooazb.top",nocase; classtype:attempted-recon; sid:200016639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200016640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200016641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200016642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.kpblio.top",nocase; classtype:attempted-recon; sid:200016643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.lenorv.top",nocase; classtype:attempted-recon; sid:200016644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200016645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200016646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200016647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200016648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200016649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.pkilix.top",nocase; classtype:attempted-recon; sid:200016650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200016651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.ronipp.top",nocase; classtype:attempted-recon; sid:200016652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200016653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200016654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200016655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200016656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200016657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200016658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.shaot.icu",nocase; classtype:attempted-recon; sid:200016659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200016660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200016661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200016662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200016663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200016664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200016665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.ufihby.top",nocase; classtype:attempted-recon; sid:200016666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.upuphone.group",nocase; classtype:attempted-recon; sid:200016667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200016668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.urekwh.top",nocase; classtype:attempted-recon; sid:200016669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200016670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.vozep.icu",nocase; classtype:attempted-recon; sid:200016671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200016672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.wbziul.top",nocase; classtype:attempted-recon; sid:200016673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200016674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200016675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.wetot.icu",nocase; classtype:attempted-recon; sid:200016676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.wetot.life",nocase; classtype:attempted-recon; sid:200016677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200016678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200016679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200016680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200016681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200016682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200016683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.xudixq.top",nocase; classtype:attempted-recon; sid:200016684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200016685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200016686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.yavkol.top",nocase; classtype:attempted-recon; sid:200016687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200016688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200016689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200016690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200016691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200016692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200016693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.znegsr.top",nocase; classtype:attempted-recon; sid:200016694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.zynepg.top",nocase; classtype:attempted-recon; sid:200016695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.02vk.top",nocase; classtype:attempted-recon; sid:200016696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200016697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.afevzf.top",nocase; classtype:attempted-recon; sid:200016698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200016699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200016700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200016701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.balaet.icu",nocase; classtype:attempted-recon; sid:200016702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200016703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200016704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200016705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.bporry.top",nocase; classtype:attempted-recon; sid:200016706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.bspybm.top",nocase; classtype:attempted-recon; sid:200016707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200016708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200016709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200016710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200016711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200016712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.cntxao.top",nocase; classtype:attempted-recon; sid:200016713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.coflya.top",nocase; classtype:attempted-recon; sid:200016714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200016715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.craycraft.top",nocase; classtype:attempted-recon; sid:200016716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.cwadib.top",nocase; classtype:attempted-recon; sid:200016717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200016718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200016719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.dauexk.top",nocase; classtype:attempted-recon; sid:200016720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200016721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200016722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200016723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200016724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200016725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200016726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200016727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.elhicw.top",nocase; classtype:attempted-recon; sid:200016728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200016729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200016730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200016731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.exoysm.top",nocase; classtype:attempted-recon; sid:200016732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200016733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200016734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200016735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200016736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200016737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200016738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200016739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.iooazb.top",nocase; classtype:attempted-recon; sid:200016740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200016741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200016742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200016743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200016744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.kpblio.top",nocase; classtype:attempted-recon; sid:200016745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.lenorv.top",nocase; classtype:attempted-recon; sid:200016746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200016747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200016748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200016749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200016750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.pkilix.top",nocase; classtype:attempted-recon; sid:200016751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200016752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200016753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200016754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.ronipp.top",nocase; classtype:attempted-recon; sid:200016755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200016756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200016757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200016758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200016759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200016760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.shaot.icu",nocase; classtype:attempted-recon; sid:200016761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200016762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200016763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200016764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200016765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200016766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.ufihby.top",nocase; classtype:attempted-recon; sid:200016767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.upuphone.group",nocase; classtype:attempted-recon; sid:200016768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200016769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.urekwh.top",nocase; classtype:attempted-recon; sid:200016770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200016771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.vozep.icu",nocase; classtype:attempted-recon; sid:200016772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200016773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.wbziul.top",nocase; classtype:attempted-recon; sid:200016774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200016775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200016776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.wetot.icu",nocase; classtype:attempted-recon; sid:200016777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.wetot.life",nocase; classtype:attempted-recon; sid:200016778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200016779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.wingfh.top",nocase; classtype:attempted-recon; sid:200016780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200016781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200016782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200016783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200016784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200016785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.xudixq.top",nocase; classtype:attempted-recon; sid:200016786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200016787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200016788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200016789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.yavkol.top",nocase; classtype:attempted-recon; sid:200016790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200016791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200016792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200016793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200016794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200016795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.znegsr.top",nocase; classtype:attempted-recon; sid:200016796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.zynepg.top",nocase; classtype:attempted-recon; sid:200016797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.02vk.top",nocase; classtype:attempted-recon; sid:200016798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200016799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.afevzf.top",nocase; classtype:attempted-recon; sid:200016800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200016801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200016802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200016803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.balaet.icu",nocase; classtype:attempted-recon; sid:200016804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200016805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200016806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200016807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.bporry.top",nocase; classtype:attempted-recon; sid:200016808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200016809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200016810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200016811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200016812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200016813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.coflya.top",nocase; classtype:attempted-recon; sid:200016814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200016815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.craycraft.top",nocase; classtype:attempted-recon; sid:200016816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.cwadib.top",nocase; classtype:attempted-recon; sid:200016817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200016818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200016819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200016820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200016821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200016822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200016823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200016824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200016825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200016826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200016827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200016828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.elhicw.top",nocase; classtype:attempted-recon; sid:200016829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200016830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200016831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200016832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.exoysm.top",nocase; classtype:attempted-recon; sid:200016833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200016834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200016835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200016836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200016837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200016838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200016839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200016840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.iooazb.top",nocase; classtype:attempted-recon; sid:200016841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200016842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200016843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200016844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.kpblio.top",nocase; classtype:attempted-recon; sid:200016845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.lenorv.top",nocase; classtype:attempted-recon; sid:200016846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200016847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200016848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200016849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200016850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200016851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.pkilix.top",nocase; classtype:attempted-recon; sid:200016852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200016853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200016854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200016855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200016856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.ronipp.top",nocase; classtype:attempted-recon; sid:200016857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200016858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200016859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200016860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200016861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200016862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200016863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.shaot.icu",nocase; classtype:attempted-recon; sid:200016864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200016865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200016866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200016867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200016868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200016869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200016870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.ufihby.top",nocase; classtype:attempted-recon; sid:200016871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.urekwh.top",nocase; classtype:attempted-recon; sid:200016872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200016873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.vozep.icu",nocase; classtype:attempted-recon; sid:200016874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200016875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.wbziul.top",nocase; classtype:attempted-recon; sid:200016876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200016877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200016878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200016879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.wingfh.top",nocase; classtype:attempted-recon; sid:200016880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200016881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200016882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200016883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200016884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200016885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.xudixq.top",nocase; classtype:attempted-recon; sid:200016886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200016887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200016888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200016889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.yavkol.top",nocase; classtype:attempted-recon; sid:200016890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200016891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200016892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200016893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200016894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200016895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200016896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200016897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.znegsr.top",nocase; classtype:attempted-recon; sid:200016898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.zynepg.top",nocase; classtype:attempted-recon; sid:200016899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.02vk.top",nocase; classtype:attempted-recon; sid:200016900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200016901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.afevzf.top",nocase; classtype:attempted-recon; sid:200016902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200016903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200016904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200016905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.balaet.icu",nocase; classtype:attempted-recon; sid:200016906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200016907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200016908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200016909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.bporry.top",nocase; classtype:attempted-recon; sid:200016910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.bspybm.top",nocase; classtype:attempted-recon; sid:200016911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200016912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200016913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200016914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200016915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200016916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.cntxao.top",nocase; classtype:attempted-recon; sid:200016917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.coflya.top",nocase; classtype:attempted-recon; sid:200016918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200016919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.craycraft.top",nocase; classtype:attempted-recon; sid:200016920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.cwadib.top",nocase; classtype:attempted-recon; sid:200016921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200016922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200016923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.dauexk.top",nocase; classtype:attempted-recon; sid:200016924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200016925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200016926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200016927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200016928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200016929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200016930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200016931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200016932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200016933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200016934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200016935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200016936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.exoysm.top",nocase; classtype:attempted-recon; sid:200016937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200016938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200016939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200016940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200016941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200016942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200016943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200016944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200016945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.iooazb.top",nocase; classtype:attempted-recon; sid:200016946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200016947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200016948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200016949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200016950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.kpblio.top",nocase; classtype:attempted-recon; sid:200016951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.lenorv.top",nocase; classtype:attempted-recon; sid:200016952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200016953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200016954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200016955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200016956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200016957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.pkilix.top",nocase; classtype:attempted-recon; sid:200016958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200016959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200016960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200016961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.ronipp.top",nocase; classtype:attempted-recon; sid:200016962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200016963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200016964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200016965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200016966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200016967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200016968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.shaot.icu",nocase; classtype:attempted-recon; sid:200016969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200016970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200016971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200016972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200016973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200016974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.ufihby.top",nocase; classtype:attempted-recon; sid:200016975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.upuphone.group",nocase; classtype:attempted-recon; sid:200016976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200016977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.urekwh.top",nocase; classtype:attempted-recon; sid:200016978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200016979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.vozep.icu",nocase; classtype:attempted-recon; sid:200016980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200016981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.wbziul.top",nocase; classtype:attempted-recon; sid:200016982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200016983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200016984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.wetot.icu",nocase; classtype:attempted-recon; sid:200016985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.wetot.life",nocase; classtype:attempted-recon; sid:200016986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200016987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.wingfh.top",nocase; classtype:attempted-recon; sid:200016988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200016989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200016990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200016991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200016992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.xudixq.top",nocase; classtype:attempted-recon; sid:200016993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200016994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200016995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200016996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.yavkol.top",nocase; classtype:attempted-recon; sid:200016997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200016998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200016999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200017000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200017001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200017002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200017003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200017004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.znegsr.top",nocase; classtype:attempted-recon; sid:200017005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.zynepg.top",nocase; classtype:attempted-recon; sid:200017006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.02vk.top",nocase; classtype:attempted-recon; sid:200017007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200017008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.afevzf.top",nocase; classtype:attempted-recon; sid:200017009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200017010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200017011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.balaet.icu",nocase; classtype:attempted-recon; sid:200017012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200017013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200017014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200017015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.bporry.top",nocase; classtype:attempted-recon; sid:200017016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.bspybm.top",nocase; classtype:attempted-recon; sid:200017017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200017018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200017019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200017020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.cntxao.top",nocase; classtype:attempted-recon; sid:200017021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.coflya.top",nocase; classtype:attempted-recon; sid:200017022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200017023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.cwadib.top",nocase; classtype:attempted-recon; sid:200017024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200017025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200017026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.dauexk.top",nocase; classtype:attempted-recon; sid:200017027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200017028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200017029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200017030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200017031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200017032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200017033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200017034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200017035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.elhicw.top",nocase; classtype:attempted-recon; sid:200017036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200017037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200017038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200017039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.exoysm.top",nocase; classtype:attempted-recon; sid:200017040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200017041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200017042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200017043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200017044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200017045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200017046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200017047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200017048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.iooazb.top",nocase; classtype:attempted-recon; sid:200017049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200017050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200017051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200017052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200017053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.kpblio.top",nocase; classtype:attempted-recon; sid:200017054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.lenorv.top",nocase; classtype:attempted-recon; sid:200017055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200017056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200017057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200017058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200017059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.pkilix.top",nocase; classtype:attempted-recon; sid:200017060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200017061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200017062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200017063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200017064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.ronipp.top",nocase; classtype:attempted-recon; sid:200017065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200017066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200017067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200017068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200017069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200017070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200017071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.shaot.icu",nocase; classtype:attempted-recon; sid:200017072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200017073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200017074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200017075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200017076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200017077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200017078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.ufihby.top",nocase; classtype:attempted-recon; sid:200017079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.upuphone.group",nocase; classtype:attempted-recon; sid:200017080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200017081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.urekwh.top",nocase; classtype:attempted-recon; sid:200017082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200017083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.vozep.icu",nocase; classtype:attempted-recon; sid:200017084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200017085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.wbziul.top",nocase; classtype:attempted-recon; sid:200017086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200017087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.wetot.icu",nocase; classtype:attempted-recon; sid:200017088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.wetot.life",nocase; classtype:attempted-recon; sid:200017089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200017090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.wingfh.top",nocase; classtype:attempted-recon; sid:200017091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200017092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200017093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200017094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200017095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200017096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.xudixq.top",nocase; classtype:attempted-recon; sid:200017097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200017098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.yavkol.top",nocase; classtype:attempted-recon; sid:200017099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200017100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200017101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200017102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200017103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200017104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200017105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200017106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.zynepg.top",nocase; classtype:attempted-recon; sid:200017107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.aiinpw.za.com",nocase; classtype:attempted-recon; sid:200017108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.apoljj.za.com",nocase; classtype:attempted-recon; sid:200017109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.axbhie.za.com",nocase; classtype:attempted-recon; sid:200017110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.cbargn.za.com",nocase; classtype:attempted-recon; sid:200017111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.cndiyk.za.com",nocase; classtype:attempted-recon; sid:200017112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.cnzlue.za.com",nocase; classtype:attempted-recon; sid:200017113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.cpclxs.za.com",nocase; classtype:attempted-recon; sid:200017114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.difkhu.za.com",nocase; classtype:attempted-recon; sid:200017115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.dnjggs.za.com",nocase; classtype:attempted-recon; sid:200017116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.dyjnbb.za.com",nocase; classtype:attempted-recon; sid:200017117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.dzniib.za.com",nocase; classtype:attempted-recon; sid:200017118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.epmgtc.za.com",nocase; classtype:attempted-recon; sid:200017119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.fflglh.za.com",nocase; classtype:attempted-recon; sid:200017120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.fjdayb.za.com",nocase; classtype:attempted-recon; sid:200017121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.flydpf.za.com",nocase; classtype:attempted-recon; sid:200017122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.fmdodt.za.com",nocase; classtype:attempted-recon; sid:200017123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.fmmfcz.za.com",nocase; classtype:attempted-recon; sid:200017124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.frghvs.za.com",nocase; classtype:attempted-recon; sid:200017125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.fthjtm.za.com",nocase; classtype:attempted-recon; sid:200017126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.fyyfxo.za.com",nocase; classtype:attempted-recon; sid:200017127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.gbwdln.za.com",nocase; classtype:attempted-recon; sid:200017128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.gbxbjo.za.com",nocase; classtype:attempted-recon; sid:200017129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.hcnqqk.za.com",nocase; classtype:attempted-recon; sid:200017130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.iezkxp.za.com",nocase; classtype:attempted-recon; sid:200017131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.ifpdph.za.com",nocase; classtype:attempted-recon; sid:200017132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.jdjghn.za.com",nocase; classtype:attempted-recon; sid:200017133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.jpxnnz.za.com",nocase; classtype:attempted-recon; sid:200017134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.jygknw.za.com",nocase; classtype:attempted-recon; sid:200017135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.jzemci.za.com",nocase; classtype:attempted-recon; sid:200017136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.kzdaec.za.com",nocase; classtype:attempted-recon; sid:200017137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.lcuqbc.za.com",nocase; classtype:attempted-recon; sid:200017138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.lklgbt.za.com",nocase; classtype:attempted-recon; sid:200017139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.lqonrt.za.com",nocase; classtype:attempted-recon; sid:200017140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.lvuojw.za.com",nocase; classtype:attempted-recon; sid:200017141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.lymdeg.za.com",nocase; classtype:attempted-recon; sid:200017142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.mgfxpv.za.com",nocase; classtype:attempted-recon; sid:200017143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.nkgnxu.za.com",nocase; classtype:attempted-recon; sid:200017144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.nlutye.za.com",nocase; classtype:attempted-recon; sid:200017145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.nqawww.za.com",nocase; classtype:attempted-recon; sid:200017146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.nskxef.za.com",nocase; classtype:attempted-recon; sid:200017147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.nsrsyf.za.com",nocase; classtype:attempted-recon; sid:200017148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.ntmdlo.za.com",nocase; classtype:attempted-recon; sid:200017149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.nyapck.za.com",nocase; classtype:attempted-recon; sid:200017150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.oaimcs.za.com",nocase; classtype:attempted-recon; sid:200017151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.obnjjr.za.com",nocase; classtype:attempted-recon; sid:200017152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.ojabvb.za.com",nocase; classtype:attempted-recon; sid:200017153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.pddjuu.za.com",nocase; classtype:attempted-recon; sid:200017154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.peqrlu.za.com",nocase; classtype:attempted-recon; sid:200017155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.pfkndl.za.com",nocase; classtype:attempted-recon; sid:200017156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.pfxtar.za.com",nocase; classtype:attempted-recon; sid:200017157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.phskmc.za.com",nocase; classtype:attempted-recon; sid:200017158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.pilzbq.za.com",nocase; classtype:attempted-recon; sid:200017159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.prfshi.za.com",nocase; classtype:attempted-recon; sid:200017160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.pruuwp.za.com",nocase; classtype:attempted-recon; sid:200017161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.pxwxmw.za.com",nocase; classtype:attempted-recon; sid:200017162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.qbkymz.za.com",nocase; classtype:attempted-recon; sid:200017163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.qigckf.za.com",nocase; classtype:attempted-recon; sid:200017164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.qsgdnx.za.com",nocase; classtype:attempted-recon; sid:200017165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.qyoqyz.za.com",nocase; classtype:attempted-recon; sid:200017166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.qytbke.za.com",nocase; classtype:attempted-recon; sid:200017167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.rouqjs.za.com",nocase; classtype:attempted-recon; sid:200017168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.ryogde.za.com",nocase; classtype:attempted-recon; sid:200017169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.sbonjn.za.com",nocase; classtype:attempted-recon; sid:200017170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.sewril.za.com",nocase; classtype:attempted-recon; sid:200017171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.stghfe.za.com",nocase; classtype:attempted-recon; sid:200017172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.sznube.za.com",nocase; classtype:attempted-recon; sid:200017173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.taqabm.za.com",nocase; classtype:attempted-recon; sid:200017174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.tfdebx.za.com",nocase; classtype:attempted-recon; sid:200017175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.trzfav.za.com",nocase; classtype:attempted-recon; sid:200017176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.uhdxmb.za.com",nocase; classtype:attempted-recon; sid:200017177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.uktqmo.za.com",nocase; classtype:attempted-recon; sid:200017178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.vhwplz.za.com",nocase; classtype:attempted-recon; sid:200017179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.vixxvg.za.com",nocase; classtype:attempted-recon; sid:200017180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.vjyswj.za.com",nocase; classtype:attempted-recon; sid:200017181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.vmmoue.za.com",nocase; classtype:attempted-recon; sid:200017182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.vnsscq.za.com",nocase; classtype:attempted-recon; sid:200017183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.vtihba.za.com",nocase; classtype:attempted-recon; sid:200017184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.vucabx.za.com",nocase; classtype:attempted-recon; sid:200017185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.vunivt.za.com",nocase; classtype:attempted-recon; sid:200017186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.vusnur.za.com",nocase; classtype:attempted-recon; sid:200017187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.wffxjj.za.com",nocase; classtype:attempted-recon; sid:200017188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.wssjge.za.com",nocase; classtype:attempted-recon; sid:200017189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.wylftw.za.com",nocase; classtype:attempted-recon; sid:200017190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.xioxfp.za.com",nocase; classtype:attempted-recon; sid:200017191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.xmigxe.za.com",nocase; classtype:attempted-recon; sid:200017192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.ygrkwy.za.com",nocase; classtype:attempted-recon; sid:200017193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.yjnkya.za.com",nocase; classtype:attempted-recon; sid:200017194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.ylvgii.za.com",nocase; classtype:attempted-recon; sid:200017195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.ymixml.za.com",nocase; classtype:attempted-recon; sid:200017196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.yoltyz.za.com",nocase; classtype:attempted-recon; sid:200017197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.yyciai.za.com",nocase; classtype:attempted-recon; sid:200017198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.zenagx.za.com",nocase; classtype:attempted-recon; sid:200017199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.zhafla.za.com",nocase; classtype:attempted-recon; sid:200017200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.ziqmtw.za.com",nocase; classtype:attempted-recon; sid:200017201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.ziuzyk.za.com",nocase; classtype:attempted-recon; sid:200017202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.zktobi.za.com",nocase; classtype:attempted-recon; sid:200017203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.zlppsf.za.com",nocase; classtype:attempted-recon; sid:200017204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.zrmusc.za.com",nocase; classtype:attempted-recon; sid:200017205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseeecei.vivreaaevesi.zudxug.za.com",nocase; classtype:attempted-recon; sid:200017206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.aiinpw.za.com",nocase; classtype:attempted-recon; sid:200017207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.apoljj.za.com",nocase; classtype:attempted-recon; sid:200017208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.axbhie.za.com",nocase; classtype:attempted-recon; sid:200017209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.cbargn.za.com",nocase; classtype:attempted-recon; sid:200017210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.cndiyk.za.com",nocase; classtype:attempted-recon; sid:200017211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.cnzlue.za.com",nocase; classtype:attempted-recon; sid:200017212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.cpclxs.za.com",nocase; classtype:attempted-recon; sid:200017213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.difkhu.za.com",nocase; classtype:attempted-recon; sid:200017214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.dnjggs.za.com",nocase; classtype:attempted-recon; sid:200017215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.dyjnbb.za.com",nocase; classtype:attempted-recon; sid:200017216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.dzniib.za.com",nocase; classtype:attempted-recon; sid:200017217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.epmgtc.za.com",nocase; classtype:attempted-recon; sid:200017218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.fflglh.za.com",nocase; classtype:attempted-recon; sid:200017219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.flydpf.za.com",nocase; classtype:attempted-recon; sid:200017220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.fmdodt.za.com",nocase; classtype:attempted-recon; sid:200017221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.fmmfcz.za.com",nocase; classtype:attempted-recon; sid:200017222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.frghvs.za.com",nocase; classtype:attempted-recon; sid:200017223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.fthjtm.za.com",nocase; classtype:attempted-recon; sid:200017224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.fyyfxo.za.com",nocase; classtype:attempted-recon; sid:200017225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.gbwdln.za.com",nocase; classtype:attempted-recon; sid:200017226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.gbxbjo.za.com",nocase; classtype:attempted-recon; sid:200017227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.hcnqqk.za.com",nocase; classtype:attempted-recon; sid:200017228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.iezkxp.za.com",nocase; classtype:attempted-recon; sid:200017229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.jdjghn.za.com",nocase; classtype:attempted-recon; sid:200017230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.jpxnnz.za.com",nocase; classtype:attempted-recon; sid:200017231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.jygknw.za.com",nocase; classtype:attempted-recon; sid:200017232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.jzemci.za.com",nocase; classtype:attempted-recon; sid:200017233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.lqonrt.za.com",nocase; classtype:attempted-recon; sid:200017234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.lvuojw.za.com",nocase; classtype:attempted-recon; sid:200017235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.lymdeg.za.com",nocase; classtype:attempted-recon; sid:200017236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.mgfxpv.za.com",nocase; classtype:attempted-recon; sid:200017237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.nkgnxu.za.com",nocase; classtype:attempted-recon; sid:200017238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.nlutye.za.com",nocase; classtype:attempted-recon; sid:200017239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.nqawww.za.com",nocase; classtype:attempted-recon; sid:200017240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.nskxef.za.com",nocase; classtype:attempted-recon; sid:200017241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.nsrsyf.za.com",nocase; classtype:attempted-recon; sid:200017242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.ntmdlo.za.com",nocase; classtype:attempted-recon; sid:200017243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.nyapck.za.com",nocase; classtype:attempted-recon; sid:200017244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.oaimcs.za.com",nocase; classtype:attempted-recon; sid:200017245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.obnjjr.za.com",nocase; classtype:attempted-recon; sid:200017246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.ojabvb.za.com",nocase; classtype:attempted-recon; sid:200017247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.pddjuu.za.com",nocase; classtype:attempted-recon; sid:200017248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.pfkndl.za.com",nocase; classtype:attempted-recon; sid:200017249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.phskmc.za.com",nocase; classtype:attempted-recon; sid:200017250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.pilzbq.za.com",nocase; classtype:attempted-recon; sid:200017251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.prfshi.za.com",nocase; classtype:attempted-recon; sid:200017252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.pruuwp.za.com",nocase; classtype:attempted-recon; sid:200017253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.pxwxmw.za.com",nocase; classtype:attempted-recon; sid:200017254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.qbkymz.za.com",nocase; classtype:attempted-recon; sid:200017255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.qigckf.za.com",nocase; classtype:attempted-recon; sid:200017256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.qsgdnx.za.com",nocase; classtype:attempted-recon; sid:200017257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.qyoqyz.za.com",nocase; classtype:attempted-recon; sid:200017258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.qytbke.za.com",nocase; classtype:attempted-recon; sid:200017259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.rouqjs.za.com",nocase; classtype:attempted-recon; sid:200017260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.rsxmth.za.com",nocase; classtype:attempted-recon; sid:200017261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.ryogde.za.com",nocase; classtype:attempted-recon; sid:200017262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.sbonjn.za.com",nocase; classtype:attempted-recon; sid:200017263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.stghfe.za.com",nocase; classtype:attempted-recon; sid:200017264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.sznube.za.com",nocase; classtype:attempted-recon; sid:200017265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.tfdebx.za.com",nocase; classtype:attempted-recon; sid:200017266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.trzfav.za.com",nocase; classtype:attempted-recon; sid:200017267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.uhdxmb.za.com",nocase; classtype:attempted-recon; sid:200017268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.uktqmo.za.com",nocase; classtype:attempted-recon; sid:200017269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.vhwplz.za.com",nocase; classtype:attempted-recon; sid:200017270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.vixxvg.za.com",nocase; classtype:attempted-recon; sid:200017271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.vjyswj.za.com",nocase; classtype:attempted-recon; sid:200017272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.vmmoue.za.com",nocase; classtype:attempted-recon; sid:200017273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.vnsscq.za.com",nocase; classtype:attempted-recon; sid:200017274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.vtihba.za.com",nocase; classtype:attempted-recon; sid:200017275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.vucabx.za.com",nocase; classtype:attempted-recon; sid:200017276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.vunivt.za.com",nocase; classtype:attempted-recon; sid:200017277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.vusnur.za.com",nocase; classtype:attempted-recon; sid:200017278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.wffxjj.za.com",nocase; classtype:attempted-recon; sid:200017279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.wssjge.za.com",nocase; classtype:attempted-recon; sid:200017280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.wylftw.za.com",nocase; classtype:attempted-recon; sid:200017281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.xioxfp.za.com",nocase; classtype:attempted-recon; sid:200017282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.xmigxe.za.com",nocase; classtype:attempted-recon; sid:200017283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.ygrkwy.za.com",nocase; classtype:attempted-recon; sid:200017284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.ylvgii.za.com",nocase; classtype:attempted-recon; sid:200017285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.ymixml.za.com",nocase; classtype:attempted-recon; sid:200017286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.yoltyz.za.com",nocase; classtype:attempted-recon; sid:200017287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.yyciai.za.com",nocase; classtype:attempted-recon; sid:200017288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.zhafla.za.com",nocase; classtype:attempted-recon; sid:200017289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.ziqmtw.za.com",nocase; classtype:attempted-recon; sid:200017290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.zktobi.za.com",nocase; classtype:attempted-recon; sid:200017291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.zlppsf.za.com",nocase; classtype:attempted-recon; sid:200017292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.zrmusc.za.com",nocase; classtype:attempted-recon; sid:200017293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseevei.viversavesi.zudxug.za.com",nocase; classtype:attempted-recon; sid:200017294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.aiinpw.za.com",nocase; classtype:attempted-recon; sid:200017295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.apoljj.za.com",nocase; classtype:attempted-recon; sid:200017296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.axbhie.za.com",nocase; classtype:attempted-recon; sid:200017297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.cbargn.za.com",nocase; classtype:attempted-recon; sid:200017298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.cndiyk.za.com",nocase; classtype:attempted-recon; sid:200017299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.cnzlue.za.com",nocase; classtype:attempted-recon; sid:200017300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.cpclxs.za.com",nocase; classtype:attempted-recon; sid:200017301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.difkhu.za.com",nocase; classtype:attempted-recon; sid:200017302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.dnjggs.za.com",nocase; classtype:attempted-recon; sid:200017303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.dyjnbb.za.com",nocase; classtype:attempted-recon; sid:200017304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.dzniib.za.com",nocase; classtype:attempted-recon; sid:200017305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.epmgtc.za.com",nocase; classtype:attempted-recon; sid:200017306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.fflglh.za.com",nocase; classtype:attempted-recon; sid:200017307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.fjdayb.za.com",nocase; classtype:attempted-recon; sid:200017308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.flydpf.za.com",nocase; classtype:attempted-recon; sid:200017309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.fmdodt.za.com",nocase; classtype:attempted-recon; sid:200017310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.fmmfcz.za.com",nocase; classtype:attempted-recon; sid:200017311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.frghvs.za.com",nocase; classtype:attempted-recon; sid:200017312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.fthjtm.za.com",nocase; classtype:attempted-recon; sid:200017313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.fyyfxo.za.com",nocase; classtype:attempted-recon; sid:200017314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.gbxbjo.za.com",nocase; classtype:attempted-recon; sid:200017315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.hcnqqk.za.com",nocase; classtype:attempted-recon; sid:200017316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.iezkxp.za.com",nocase; classtype:attempted-recon; sid:200017317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.ifpdph.za.com",nocase; classtype:attempted-recon; sid:200017318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.jdjghn.za.com",nocase; classtype:attempted-recon; sid:200017319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.jpxnnz.za.com",nocase; classtype:attempted-recon; sid:200017320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.jygknw.za.com",nocase; classtype:attempted-recon; sid:200017321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.jzemci.za.com",nocase; classtype:attempted-recon; sid:200017322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.kzdaec.za.com",nocase; classtype:attempted-recon; sid:200017323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.lcuqbc.za.com",nocase; classtype:attempted-recon; sid:200017324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.lklgbt.za.com",nocase; classtype:attempted-recon; sid:200017325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.lqonrt.za.com",nocase; classtype:attempted-recon; sid:200017326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.lvuojw.za.com",nocase; classtype:attempted-recon; sid:200017327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.lymdeg.za.com",nocase; classtype:attempted-recon; sid:200017328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.mgfxpv.za.com",nocase; classtype:attempted-recon; sid:200017329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.nkgnxu.za.com",nocase; classtype:attempted-recon; sid:200017330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.nlutye.za.com",nocase; classtype:attempted-recon; sid:200017331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.nqawww.za.com",nocase; classtype:attempted-recon; sid:200017332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.nskxef.za.com",nocase; classtype:attempted-recon; sid:200017333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.nsrsyf.za.com",nocase; classtype:attempted-recon; sid:200017334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.ntmdlo.za.com",nocase; classtype:attempted-recon; sid:200017335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.nyapck.za.com",nocase; classtype:attempted-recon; sid:200017336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.oaimcs.za.com",nocase; classtype:attempted-recon; sid:200017337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.obnjjr.za.com",nocase; classtype:attempted-recon; sid:200017338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.ojabvb.za.com",nocase; classtype:attempted-recon; sid:200017339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.pddjuu.za.com",nocase; classtype:attempted-recon; sid:200017340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.peqrlu.za.com",nocase; classtype:attempted-recon; sid:200017341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.pfkndl.za.com",nocase; classtype:attempted-recon; sid:200017342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.pfxtar.za.com",nocase; classtype:attempted-recon; sid:200017343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.phskmc.za.com",nocase; classtype:attempted-recon; sid:200017344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.pilzbq.za.com",nocase; classtype:attempted-recon; sid:200017345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.prfshi.za.com",nocase; classtype:attempted-recon; sid:200017346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.pruuwp.za.com",nocase; classtype:attempted-recon; sid:200017347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.pxwxmw.za.com",nocase; classtype:attempted-recon; sid:200017348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.qbkymz.za.com",nocase; classtype:attempted-recon; sid:200017349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.qigckf.za.com",nocase; classtype:attempted-recon; sid:200017350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.qsgdnx.za.com",nocase; classtype:attempted-recon; sid:200017351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.qyoqyz.za.com",nocase; classtype:attempted-recon; sid:200017352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.qytbke.za.com",nocase; classtype:attempted-recon; sid:200017353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.rouqjs.za.com",nocase; classtype:attempted-recon; sid:200017354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.rsxmth.za.com",nocase; classtype:attempted-recon; sid:200017355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.ryogde.za.com",nocase; classtype:attempted-recon; sid:200017356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.sbonjn.za.com",nocase; classtype:attempted-recon; sid:200017357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.sewril.za.com",nocase; classtype:attempted-recon; sid:200017358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.stghfe.za.com",nocase; classtype:attempted-recon; sid:200017359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.sznube.za.com",nocase; classtype:attempted-recon; sid:200017360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.taqabm.za.com",nocase; classtype:attempted-recon; sid:200017361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.tfdebx.za.com",nocase; classtype:attempted-recon; sid:200017362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.trzfav.za.com",nocase; classtype:attempted-recon; sid:200017363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.uhdxmb.za.com",nocase; classtype:attempted-recon; sid:200017364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.uktqmo.za.com",nocase; classtype:attempted-recon; sid:200017365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.vhwplz.za.com",nocase; classtype:attempted-recon; sid:200017366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.vixxvg.za.com",nocase; classtype:attempted-recon; sid:200017367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.vjyswj.za.com",nocase; classtype:attempted-recon; sid:200017368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.vmmoue.za.com",nocase; classtype:attempted-recon; sid:200017369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.vnsscq.za.com",nocase; classtype:attempted-recon; sid:200017370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.vtihba.za.com",nocase; classtype:attempted-recon; sid:200017371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.vucabx.za.com",nocase; classtype:attempted-recon; sid:200017372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.vunivt.za.com",nocase; classtype:attempted-recon; sid:200017373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.vusnur.za.com",nocase; classtype:attempted-recon; sid:200017374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.wffxjj.za.com",nocase; classtype:attempted-recon; sid:200017375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.wssjge.za.com",nocase; classtype:attempted-recon; sid:200017376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.wylftw.za.com",nocase; classtype:attempted-recon; sid:200017377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.xioxfp.za.com",nocase; classtype:attempted-recon; sid:200017378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.xmigxe.za.com",nocase; classtype:attempted-recon; sid:200017379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.ygrkwy.za.com",nocase; classtype:attempted-recon; sid:200017380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.yjnkya.za.com",nocase; classtype:attempted-recon; sid:200017381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.ylvgii.za.com",nocase; classtype:attempted-recon; sid:200017382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.ymixml.za.com",nocase; classtype:attempted-recon; sid:200017383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.yoltyz.za.com",nocase; classtype:attempted-recon; sid:200017384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.yyciai.za.com",nocase; classtype:attempted-recon; sid:200017385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.zenagx.za.com",nocase; classtype:attempted-recon; sid:200017386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.zhafla.za.com",nocase; classtype:attempted-recon; sid:200017387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.ziqmtw.za.com",nocase; classtype:attempted-recon; sid:200017388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.ziuzyk.za.com",nocase; classtype:attempted-recon; sid:200017389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.zktobi.za.com",nocase; classtype:attempted-recon; sid:200017390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.zlppsf.za.com",nocase; classtype:attempted-recon; sid:200017391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.zrmusc.za.com",nocase; classtype:attempted-recon; sid:200017392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseieecei.virveiaaevesi.zudxug.za.com",nocase; classtype:attempted-recon; sid:200017393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.aiinpw.za.com",nocase; classtype:attempted-recon; sid:200017394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.apoljj.za.com",nocase; classtype:attempted-recon; sid:200017395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.axbhie.za.com",nocase; classtype:attempted-recon; sid:200017396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.cbargn.za.com",nocase; classtype:attempted-recon; sid:200017397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.cndiyk.za.com",nocase; classtype:attempted-recon; sid:200017398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.cnzlue.za.com",nocase; classtype:attempted-recon; sid:200017399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.cpclxs.za.com",nocase; classtype:attempted-recon; sid:200017400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.difkhu.za.com",nocase; classtype:attempted-recon; sid:200017401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.dnjggs.za.com",nocase; classtype:attempted-recon; sid:200017402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.dyjnbb.za.com",nocase; classtype:attempted-recon; sid:200017403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.dzniib.za.com",nocase; classtype:attempted-recon; sid:200017404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.epmgtc.za.com",nocase; classtype:attempted-recon; sid:200017405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.fflglh.za.com",nocase; classtype:attempted-recon; sid:200017406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.fjdayb.za.com",nocase; classtype:attempted-recon; sid:200017407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.flydpf.za.com",nocase; classtype:attempted-recon; sid:200017408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.fmdodt.za.com",nocase; classtype:attempted-recon; sid:200017409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.fmmfcz.za.com",nocase; classtype:attempted-recon; sid:200017410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.frghvs.za.com",nocase; classtype:attempted-recon; sid:200017411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.fthjtm.za.com",nocase; classtype:attempted-recon; sid:200017412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.fyyfxo.za.com",nocase; classtype:attempted-recon; sid:200017413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.gbwdln.za.com",nocase; classtype:attempted-recon; sid:200017414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.gbxbjo.za.com",nocase; classtype:attempted-recon; sid:200017415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.hcnqqk.za.com",nocase; classtype:attempted-recon; sid:200017416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.iezkxp.za.com",nocase; classtype:attempted-recon; sid:200017417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.ifpdph.za.com",nocase; classtype:attempted-recon; sid:200017418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.jdjghn.za.com",nocase; classtype:attempted-recon; sid:200017419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.jpxnnz.za.com",nocase; classtype:attempted-recon; sid:200017420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.jygknw.za.com",nocase; classtype:attempted-recon; sid:200017421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.jzemci.za.com",nocase; classtype:attempted-recon; sid:200017422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.kzdaec.za.com",nocase; classtype:attempted-recon; sid:200017423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.lcuqbc.za.com",nocase; classtype:attempted-recon; sid:200017424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.lklgbt.za.com",nocase; classtype:attempted-recon; sid:200017425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.lqonrt.za.com",nocase; classtype:attempted-recon; sid:200017426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.lvuojw.za.com",nocase; classtype:attempted-recon; sid:200017427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.lymdeg.za.com",nocase; classtype:attempted-recon; sid:200017428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.mgfxpv.za.com",nocase; classtype:attempted-recon; sid:200017429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.nkgnxu.za.com",nocase; classtype:attempted-recon; sid:200017430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.nlutye.za.com",nocase; classtype:attempted-recon; sid:200017431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.nqawww.za.com",nocase; classtype:attempted-recon; sid:200017432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.nskxef.za.com",nocase; classtype:attempted-recon; sid:200017433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.nsrsyf.za.com",nocase; classtype:attempted-recon; sid:200017434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.ntmdlo.za.com",nocase; classtype:attempted-recon; sid:200017435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.nyapck.za.com",nocase; classtype:attempted-recon; sid:200017436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.oaimcs.za.com",nocase; classtype:attempted-recon; sid:200017437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.obnjjr.za.com",nocase; classtype:attempted-recon; sid:200017438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.ojabvb.za.com",nocase; classtype:attempted-recon; sid:200017439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.pddjuu.za.com",nocase; classtype:attempted-recon; sid:200017440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.peqrlu.za.com",nocase; classtype:attempted-recon; sid:200017441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.pfkndl.za.com",nocase; classtype:attempted-recon; sid:200017442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.pfxtar.za.com",nocase; classtype:attempted-recon; sid:200017443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.phskmc.za.com",nocase; classtype:attempted-recon; sid:200017444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.pilzbq.za.com",nocase; classtype:attempted-recon; sid:200017445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.prfshi.za.com",nocase; classtype:attempted-recon; sid:200017446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.pruuwp.za.com",nocase; classtype:attempted-recon; sid:200017447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.pxwxmw.za.com",nocase; classtype:attempted-recon; sid:200017448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.qbkymz.za.com",nocase; classtype:attempted-recon; sid:200017449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.qigckf.za.com",nocase; classtype:attempted-recon; sid:200017450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.qsgdnx.za.com",nocase; classtype:attempted-recon; sid:200017451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.qyoqyz.za.com",nocase; classtype:attempted-recon; sid:200017452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.qytbke.za.com",nocase; classtype:attempted-recon; sid:200017453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.rouqjs.za.com",nocase; classtype:attempted-recon; sid:200017454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.rsxmth.za.com",nocase; classtype:attempted-recon; sid:200017455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.ryogde.za.com",nocase; classtype:attempted-recon; sid:200017456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.sbonjn.za.com",nocase; classtype:attempted-recon; sid:200017457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.sewril.za.com",nocase; classtype:attempted-recon; sid:200017458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.stghfe.za.com",nocase; classtype:attempted-recon; sid:200017459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.sznube.za.com",nocase; classtype:attempted-recon; sid:200017460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.taqabm.za.com",nocase; classtype:attempted-recon; sid:200017461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.tfdebx.za.com",nocase; classtype:attempted-recon; sid:200017462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.trzfav.za.com",nocase; classtype:attempted-recon; sid:200017463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.uhdxmb.za.com",nocase; classtype:attempted-recon; sid:200017464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.uktqmo.za.com",nocase; classtype:attempted-recon; sid:200017465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.vhwplz.za.com",nocase; classtype:attempted-recon; sid:200017466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.vixxvg.za.com",nocase; classtype:attempted-recon; sid:200017467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.vjyswj.za.com",nocase; classtype:attempted-recon; sid:200017468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.vmmoue.za.com",nocase; classtype:attempted-recon; sid:200017469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.vnsscq.za.com",nocase; classtype:attempted-recon; sid:200017470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.vtihba.za.com",nocase; classtype:attempted-recon; sid:200017471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.vucabx.za.com",nocase; classtype:attempted-recon; sid:200017472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.vunivt.za.com",nocase; classtype:attempted-recon; sid:200017473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.vusnur.za.com",nocase; classtype:attempted-recon; sid:200017474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.wffxjj.za.com",nocase; classtype:attempted-recon; sid:200017475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.wssjge.za.com",nocase; classtype:attempted-recon; sid:200017476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.wylftw.za.com",nocase; classtype:attempted-recon; sid:200017477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.xioxfp.za.com",nocase; classtype:attempted-recon; sid:200017478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.xmigxe.za.com",nocase; classtype:attempted-recon; sid:200017479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.ygrkwy.za.com",nocase; classtype:attempted-recon; sid:200017480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.yjnkya.za.com",nocase; classtype:attempted-recon; sid:200017481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.ylvgii.za.com",nocase; classtype:attempted-recon; sid:200017482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.ymixml.za.com",nocase; classtype:attempted-recon; sid:200017483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.yoltyz.za.com",nocase; classtype:attempted-recon; sid:200017484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.yyciai.za.com",nocase; classtype:attempted-recon; sid:200017485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.zenagx.za.com",nocase; classtype:attempted-recon; sid:200017486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.zhafla.za.com",nocase; classtype:attempted-recon; sid:200017487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.ziqmtw.za.com",nocase; classtype:attempted-recon; sid:200017488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.ziuzyk.za.com",nocase; classtype:attempted-recon; sid:200017489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.zktobi.za.com",nocase; classtype:attempted-recon; sid:200017490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.zlppsf.za.com",nocase; classtype:attempted-recon; sid:200017491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.zrmusc.za.com",nocase; classtype:attempted-recon; sid:200017492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcseievei.vivresiavesi.zudxug.za.com",nocase; classtype:attempted-recon; sid:200017493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.aiinpw.za.com",nocase; classtype:attempted-recon; sid:200017494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.apoljj.za.com",nocase; classtype:attempted-recon; sid:200017495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.axbhie.za.com",nocase; classtype:attempted-recon; sid:200017496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.cbargn.za.com",nocase; classtype:attempted-recon; sid:200017497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.cndiyk.za.com",nocase; classtype:attempted-recon; sid:200017498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.cnzlue.za.com",nocase; classtype:attempted-recon; sid:200017499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.cpclxs.za.com",nocase; classtype:attempted-recon; sid:200017500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.difkhu.za.com",nocase; classtype:attempted-recon; sid:200017501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.dnjggs.za.com",nocase; classtype:attempted-recon; sid:200017502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.dyjnbb.za.com",nocase; classtype:attempted-recon; sid:200017503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.dzniib.za.com",nocase; classtype:attempted-recon; sid:200017504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.epmgtc.za.com",nocase; classtype:attempted-recon; sid:200017505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.fflglh.za.com",nocase; classtype:attempted-recon; sid:200017506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.fjdayb.za.com",nocase; classtype:attempted-recon; sid:200017507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.flydpf.za.com",nocase; classtype:attempted-recon; sid:200017508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.fmdodt.za.com",nocase; classtype:attempted-recon; sid:200017509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.fmmfcz.za.com",nocase; classtype:attempted-recon; sid:200017510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.frghvs.za.com",nocase; classtype:attempted-recon; sid:200017511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.fthjtm.za.com",nocase; classtype:attempted-recon; sid:200017512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.fyyfxo.za.com",nocase; classtype:attempted-recon; sid:200017513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.gbwdln.za.com",nocase; classtype:attempted-recon; sid:200017514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.gbxbjo.za.com",nocase; classtype:attempted-recon; sid:200017515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.hcnqqk.za.com",nocase; classtype:attempted-recon; sid:200017516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.iezkxp.za.com",nocase; classtype:attempted-recon; sid:200017517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.ifpdph.za.com",nocase; classtype:attempted-recon; sid:200017518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.jdjghn.za.com",nocase; classtype:attempted-recon; sid:200017519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.jpxnnz.za.com",nocase; classtype:attempted-recon; sid:200017520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.jygknw.za.com",nocase; classtype:attempted-recon; sid:200017521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.jzemci.za.com",nocase; classtype:attempted-recon; sid:200017522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.kzdaec.za.com",nocase; classtype:attempted-recon; sid:200017523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.lcuqbc.za.com",nocase; classtype:attempted-recon; sid:200017524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.lklgbt.za.com",nocase; classtype:attempted-recon; sid:200017525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.lqonrt.za.com",nocase; classtype:attempted-recon; sid:200017526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.lvuojw.za.com",nocase; classtype:attempted-recon; sid:200017527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.lymdeg.za.com",nocase; classtype:attempted-recon; sid:200017528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.mgfxpv.za.com",nocase; classtype:attempted-recon; sid:200017529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.nkgnxu.za.com",nocase; classtype:attempted-recon; sid:200017530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.nlutye.za.com",nocase; classtype:attempted-recon; sid:200017531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.nqawww.za.com",nocase; classtype:attempted-recon; sid:200017532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.nskxef.za.com",nocase; classtype:attempted-recon; sid:200017533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.nsrsyf.za.com",nocase; classtype:attempted-recon; sid:200017534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.ntmdlo.za.com",nocase; classtype:attempted-recon; sid:200017535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.nyapck.za.com",nocase; classtype:attempted-recon; sid:200017536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.oaimcs.za.com",nocase; classtype:attempted-recon; sid:200017537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.obnjjr.za.com",nocase; classtype:attempted-recon; sid:200017538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.ojabvb.za.com",nocase; classtype:attempted-recon; sid:200017539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.pddjuu.za.com",nocase; classtype:attempted-recon; sid:200017540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.peqrlu.za.com",nocase; classtype:attempted-recon; sid:200017541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.pfkndl.za.com",nocase; classtype:attempted-recon; sid:200017542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.pfxtar.za.com",nocase; classtype:attempted-recon; sid:200017543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.phskmc.za.com",nocase; classtype:attempted-recon; sid:200017544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.pilzbq.za.com",nocase; classtype:attempted-recon; sid:200017545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.prfshi.za.com",nocase; classtype:attempted-recon; sid:200017546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.pruuwp.za.com",nocase; classtype:attempted-recon; sid:200017547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.pxwxmw.za.com",nocase; classtype:attempted-recon; sid:200017548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.qbkymz.za.com",nocase; classtype:attempted-recon; sid:200017549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.qigckf.za.com",nocase; classtype:attempted-recon; sid:200017550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.qsgdnx.za.com",nocase; classtype:attempted-recon; sid:200017551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.qyoqyz.za.com",nocase; classtype:attempted-recon; sid:200017552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.qytbke.za.com",nocase; classtype:attempted-recon; sid:200017553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.rouqjs.za.com",nocase; classtype:attempted-recon; sid:200017554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.rsxmth.za.com",nocase; classtype:attempted-recon; sid:200017555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.ryogde.za.com",nocase; classtype:attempted-recon; sid:200017556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.sbonjn.za.com",nocase; classtype:attempted-recon; sid:200017557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.sewril.za.com",nocase; classtype:attempted-recon; sid:200017558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.stghfe.za.com",nocase; classtype:attempted-recon; sid:200017559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.sznube.za.com",nocase; classtype:attempted-recon; sid:200017560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.taqabm.za.com",nocase; classtype:attempted-recon; sid:200017561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.tfdebx.za.com",nocase; classtype:attempted-recon; sid:200017562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.trzfav.za.com",nocase; classtype:attempted-recon; sid:200017563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.uhdxmb.za.com",nocase; classtype:attempted-recon; sid:200017564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.uktqmo.za.com",nocase; classtype:attempted-recon; sid:200017565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.vhwplz.za.com",nocase; classtype:attempted-recon; sid:200017566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.vixxvg.za.com",nocase; classtype:attempted-recon; sid:200017567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.vjyswj.za.com",nocase; classtype:attempted-recon; sid:200017568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.vmmoue.za.com",nocase; classtype:attempted-recon; sid:200017569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.vnsscq.za.com",nocase; classtype:attempted-recon; sid:200017570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.vtihba.za.com",nocase; classtype:attempted-recon; sid:200017571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.vucabx.za.com",nocase; classtype:attempted-recon; sid:200017572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.vunivt.za.com",nocase; classtype:attempted-recon; sid:200017573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.vusnur.za.com",nocase; classtype:attempted-recon; sid:200017574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.wffxjj.za.com",nocase; classtype:attempted-recon; sid:200017575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.wssjge.za.com",nocase; classtype:attempted-recon; sid:200017576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.wylftw.za.com",nocase; classtype:attempted-recon; sid:200017577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.xioxfp.za.com",nocase; classtype:attempted-recon; sid:200017578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.xmigxe.za.com",nocase; classtype:attempted-recon; sid:200017579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.ygrkwy.za.com",nocase; classtype:attempted-recon; sid:200017580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.yjnkya.za.com",nocase; classtype:attempted-recon; sid:200017581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.ylvgii.za.com",nocase; classtype:attempted-recon; sid:200017582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.ymixml.za.com",nocase; classtype:attempted-recon; sid:200017583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.yoltyz.za.com",nocase; classtype:attempted-recon; sid:200017584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.yyciai.za.com",nocase; classtype:attempted-recon; sid:200017585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.zenagx.za.com",nocase; classtype:attempted-recon; sid:200017586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.zhafla.za.com",nocase; classtype:attempted-recon; sid:200017587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.ziqmtw.za.com",nocase; classtype:attempted-recon; sid:200017588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.ziuzyk.za.com",nocase; classtype:attempted-recon; sid:200017589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.zktobi.za.com",nocase; classtype:attempted-recon; sid:200017590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.zlppsf.za.com",nocase; classtype:attempted-recon; sid:200017591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.zrmusc.za.com",nocase; classtype:attempted-recon; sid:200017592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceiveci.vivrseiaveesi.zudxug.za.com",nocase; classtype:attempted-recon; sid:200017593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.aiinpw.za.com",nocase; classtype:attempted-recon; sid:200017594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.apoljj.za.com",nocase; classtype:attempted-recon; sid:200017595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.axbhie.za.com",nocase; classtype:attempted-recon; sid:200017596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.cbargn.za.com",nocase; classtype:attempted-recon; sid:200017597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.cndiyk.za.com",nocase; classtype:attempted-recon; sid:200017598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.cnzlue.za.com",nocase; classtype:attempted-recon; sid:200017599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.cpclxs.za.com",nocase; classtype:attempted-recon; sid:200017600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.difkhu.za.com",nocase; classtype:attempted-recon; sid:200017601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.dnjggs.za.com",nocase; classtype:attempted-recon; sid:200017602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.dyjnbb.za.com",nocase; classtype:attempted-recon; sid:200017603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.dzniib.za.com",nocase; classtype:attempted-recon; sid:200017604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.epmgtc.za.com",nocase; classtype:attempted-recon; sid:200017605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.fflglh.za.com",nocase; classtype:attempted-recon; sid:200017606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.fjdayb.za.com",nocase; classtype:attempted-recon; sid:200017607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.flydpf.za.com",nocase; classtype:attempted-recon; sid:200017608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.fmdodt.za.com",nocase; classtype:attempted-recon; sid:200017609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.fmmfcz.za.com",nocase; classtype:attempted-recon; sid:200017610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.frghvs.za.com",nocase; classtype:attempted-recon; sid:200017611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.fthjtm.za.com",nocase; classtype:attempted-recon; sid:200017612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.fyyfxo.za.com",nocase; classtype:attempted-recon; sid:200017613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.gbwdln.za.com",nocase; classtype:attempted-recon; sid:200017614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.gbxbjo.za.com",nocase; classtype:attempted-recon; sid:200017615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.hcnqqk.za.com",nocase; classtype:attempted-recon; sid:200017616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.iezkxp.za.com",nocase; classtype:attempted-recon; sid:200017617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.ifpdph.za.com",nocase; classtype:attempted-recon; sid:200017618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.jdjghn.za.com",nocase; classtype:attempted-recon; sid:200017619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.jpxnnz.za.com",nocase; classtype:attempted-recon; sid:200017620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.jygknw.za.com",nocase; classtype:attempted-recon; sid:200017621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.jzemci.za.com",nocase; classtype:attempted-recon; sid:200017622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.kzdaec.za.com",nocase; classtype:attempted-recon; sid:200017623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.lcuqbc.za.com",nocase; classtype:attempted-recon; sid:200017624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.lklgbt.za.com",nocase; classtype:attempted-recon; sid:200017625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.lqonrt.za.com",nocase; classtype:attempted-recon; sid:200017626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.lvuojw.za.com",nocase; classtype:attempted-recon; sid:200017627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.lymdeg.za.com",nocase; classtype:attempted-recon; sid:200017628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.mgfxpv.za.com",nocase; classtype:attempted-recon; sid:200017629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.nkgnxu.za.com",nocase; classtype:attempted-recon; sid:200017630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.nlutye.za.com",nocase; classtype:attempted-recon; sid:200017631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.nqawww.za.com",nocase; classtype:attempted-recon; sid:200017632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.nskxef.za.com",nocase; classtype:attempted-recon; sid:200017633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.nsrsyf.za.com",nocase; classtype:attempted-recon; sid:200017634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.ntmdlo.za.com",nocase; classtype:attempted-recon; sid:200017635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.nyapck.za.com",nocase; classtype:attempted-recon; sid:200017636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.oaimcs.za.com",nocase; classtype:attempted-recon; sid:200017637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.obnjjr.za.com",nocase; classtype:attempted-recon; sid:200017638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.ojabvb.za.com",nocase; classtype:attempted-recon; sid:200017639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.pddjuu.za.com",nocase; classtype:attempted-recon; sid:200017640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.peqrlu.za.com",nocase; classtype:attempted-recon; sid:200017641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.pfxtar.za.com",nocase; classtype:attempted-recon; sid:200017642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.phskmc.za.com",nocase; classtype:attempted-recon; sid:200017643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.pilzbq.za.com",nocase; classtype:attempted-recon; sid:200017644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.prfshi.za.com",nocase; classtype:attempted-recon; sid:200017645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.pruuwp.za.com",nocase; classtype:attempted-recon; sid:200017646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.pxwxmw.za.com",nocase; classtype:attempted-recon; sid:200017647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.qbkymz.za.com",nocase; classtype:attempted-recon; sid:200017648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.qigckf.za.com",nocase; classtype:attempted-recon; sid:200017649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.qsgdnx.za.com",nocase; classtype:attempted-recon; sid:200017650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.qyoqyz.za.com",nocase; classtype:attempted-recon; sid:200017651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.qytbke.za.com",nocase; classtype:attempted-recon; sid:200017652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.rouqjs.za.com",nocase; classtype:attempted-recon; sid:200017653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.rsxmth.za.com",nocase; classtype:attempted-recon; sid:200017654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.ryogde.za.com",nocase; classtype:attempted-recon; sid:200017655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.sbonjn.za.com",nocase; classtype:attempted-recon; sid:200017656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.sewril.za.com",nocase; classtype:attempted-recon; sid:200017657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.stghfe.za.com",nocase; classtype:attempted-recon; sid:200017658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.sznube.za.com",nocase; classtype:attempted-recon; sid:200017659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.taqabm.za.com",nocase; classtype:attempted-recon; sid:200017660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.tfdebx.za.com",nocase; classtype:attempted-recon; sid:200017661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.trzfav.za.com",nocase; classtype:attempted-recon; sid:200017662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.uhdxmb.za.com",nocase; classtype:attempted-recon; sid:200017663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.uktqmo.za.com",nocase; classtype:attempted-recon; sid:200017664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.vhwplz.za.com",nocase; classtype:attempted-recon; sid:200017665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.vixxvg.za.com",nocase; classtype:attempted-recon; sid:200017666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.vjyswj.za.com",nocase; classtype:attempted-recon; sid:200017667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.vmmoue.za.com",nocase; classtype:attempted-recon; sid:200017668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.vnsscq.za.com",nocase; classtype:attempted-recon; sid:200017669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.vtihba.za.com",nocase; classtype:attempted-recon; sid:200017670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.vucabx.za.com",nocase; classtype:attempted-recon; sid:200017671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.vunivt.za.com",nocase; classtype:attempted-recon; sid:200017672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.vusnur.za.com",nocase; classtype:attempted-recon; sid:200017673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.wffxjj.za.com",nocase; classtype:attempted-recon; sid:200017674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.wssjge.za.com",nocase; classtype:attempted-recon; sid:200017675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.wylftw.za.com",nocase; classtype:attempted-recon; sid:200017676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.xioxfp.za.com",nocase; classtype:attempted-recon; sid:200017677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.xmigxe.za.com",nocase; classtype:attempted-recon; sid:200017678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.ygrkwy.za.com",nocase; classtype:attempted-recon; sid:200017679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.yjnkya.za.com",nocase; classtype:attempted-recon; sid:200017680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.ylvgii.za.com",nocase; classtype:attempted-recon; sid:200017681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.ymixml.za.com",nocase; classtype:attempted-recon; sid:200017682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.yoltyz.za.com",nocase; classtype:attempted-recon; sid:200017683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.yyciai.za.com",nocase; classtype:attempted-recon; sid:200017684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.zenagx.za.com",nocase; classtype:attempted-recon; sid:200017685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.zhafla.za.com",nocase; classtype:attempted-recon; sid:200017686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.ziqmtw.za.com",nocase; classtype:attempted-recon; sid:200017687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.ziuzyk.za.com",nocase; classtype:attempted-recon; sid:200017688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.zktobi.za.com",nocase; classtype:attempted-recon; sid:200017689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.zlppsf.za.com",nocase; classtype:attempted-recon; sid:200017690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.zrmusc.za.com",nocase; classtype:attempted-recon; sid:200017691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceivei.vivsresivesi.zudxug.za.com",nocase; classtype:attempted-recon; sid:200017692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.aiinpw.za.com",nocase; classtype:attempted-recon; sid:200017693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.apoljj.za.com",nocase; classtype:attempted-recon; sid:200017694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.axbhie.za.com",nocase; classtype:attempted-recon; sid:200017695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.cbargn.za.com",nocase; classtype:attempted-recon; sid:200017696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.cndiyk.za.com",nocase; classtype:attempted-recon; sid:200017697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.cnzlue.za.com",nocase; classtype:attempted-recon; sid:200017698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.cpclxs.za.com",nocase; classtype:attempted-recon; sid:200017699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.difkhu.za.com",nocase; classtype:attempted-recon; sid:200017700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.dnjggs.za.com",nocase; classtype:attempted-recon; sid:200017701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.dyjnbb.za.com",nocase; classtype:attempted-recon; sid:200017702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.dzniib.za.com",nocase; classtype:attempted-recon; sid:200017703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.epmgtc.za.com",nocase; classtype:attempted-recon; sid:200017704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.fflglh.za.com",nocase; classtype:attempted-recon; sid:200017705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.fjdayb.za.com",nocase; classtype:attempted-recon; sid:200017706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.flydpf.za.com",nocase; classtype:attempted-recon; sid:200017707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.fmdodt.za.com",nocase; classtype:attempted-recon; sid:200017708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.fmmfcz.za.com",nocase; classtype:attempted-recon; sid:200017709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.frghvs.za.com",nocase; classtype:attempted-recon; sid:200017710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.fthjtm.za.com",nocase; classtype:attempted-recon; sid:200017711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.fyyfxo.za.com",nocase; classtype:attempted-recon; sid:200017712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.gbwdln.za.com",nocase; classtype:attempted-recon; sid:200017713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.gbxbjo.za.com",nocase; classtype:attempted-recon; sid:200017714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.hcnqqk.za.com",nocase; classtype:attempted-recon; sid:200017715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.iezkxp.za.com",nocase; classtype:attempted-recon; sid:200017716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.ifpdph.za.com",nocase; classtype:attempted-recon; sid:200017717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.jdjghn.za.com",nocase; classtype:attempted-recon; sid:200017718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.jpxnnz.za.com",nocase; classtype:attempted-recon; sid:200017719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.jygknw.za.com",nocase; classtype:attempted-recon; sid:200017720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.jzemci.za.com",nocase; classtype:attempted-recon; sid:200017721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.kzdaec.za.com",nocase; classtype:attempted-recon; sid:200017722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.lcuqbc.za.com",nocase; classtype:attempted-recon; sid:200017723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.lklgbt.za.com",nocase; classtype:attempted-recon; sid:200017724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.lqonrt.za.com",nocase; classtype:attempted-recon; sid:200017725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.lvuojw.za.com",nocase; classtype:attempted-recon; sid:200017726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.lymdeg.za.com",nocase; classtype:attempted-recon; sid:200017727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.mgfxpv.za.com",nocase; classtype:attempted-recon; sid:200017728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.nkgnxu.za.com",nocase; classtype:attempted-recon; sid:200017729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.nlutye.za.com",nocase; classtype:attempted-recon; sid:200017730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.nqawww.za.com",nocase; classtype:attempted-recon; sid:200017731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.nskxef.za.com",nocase; classtype:attempted-recon; sid:200017732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.nsrsyf.za.com",nocase; classtype:attempted-recon; sid:200017733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.ntmdlo.za.com",nocase; classtype:attempted-recon; sid:200017734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.nyapck.za.com",nocase; classtype:attempted-recon; sid:200017735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.oaimcs.za.com",nocase; classtype:attempted-recon; sid:200017736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.obnjjr.za.com",nocase; classtype:attempted-recon; sid:200017737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.ojabvb.za.com",nocase; classtype:attempted-recon; sid:200017738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.pddjuu.za.com",nocase; classtype:attempted-recon; sid:200017739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.peqrlu.za.com",nocase; classtype:attempted-recon; sid:200017740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.pfkndl.za.com",nocase; classtype:attempted-recon; sid:200017741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.pfxtar.za.com",nocase; classtype:attempted-recon; sid:200017742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.phskmc.za.com",nocase; classtype:attempted-recon; sid:200017743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.pilzbq.za.com",nocase; classtype:attempted-recon; sid:200017744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.prfshi.za.com",nocase; classtype:attempted-recon; sid:200017745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.pruuwp.za.com",nocase; classtype:attempted-recon; sid:200017746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.pxwxmw.za.com",nocase; classtype:attempted-recon; sid:200017747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.qbkymz.za.com",nocase; classtype:attempted-recon; sid:200017748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.qigckf.za.com",nocase; classtype:attempted-recon; sid:200017749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.qsgdnx.za.com",nocase; classtype:attempted-recon; sid:200017750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.qyoqyz.za.com",nocase; classtype:attempted-recon; sid:200017751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.qytbke.za.com",nocase; classtype:attempted-recon; sid:200017752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.rouqjs.za.com",nocase; classtype:attempted-recon; sid:200017753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.rsxmth.za.com",nocase; classtype:attempted-recon; sid:200017754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.ryogde.za.com",nocase; classtype:attempted-recon; sid:200017755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.sbonjn.za.com",nocase; classtype:attempted-recon; sid:200017756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.sewril.za.com",nocase; classtype:attempted-recon; sid:200017757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.stghfe.za.com",nocase; classtype:attempted-recon; sid:200017758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.sznube.za.com",nocase; classtype:attempted-recon; sid:200017759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.taqabm.za.com",nocase; classtype:attempted-recon; sid:200017760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.tfdebx.za.com",nocase; classtype:attempted-recon; sid:200017761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.trzfav.za.com",nocase; classtype:attempted-recon; sid:200017762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.uhdxmb.za.com",nocase; classtype:attempted-recon; sid:200017763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.uktqmo.za.com",nocase; classtype:attempted-recon; sid:200017764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.vhwplz.za.com",nocase; classtype:attempted-recon; sid:200017765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.vixxvg.za.com",nocase; classtype:attempted-recon; sid:200017766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.vjyswj.za.com",nocase; classtype:attempted-recon; sid:200017767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.vmmoue.za.com",nocase; classtype:attempted-recon; sid:200017768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.vnsscq.za.com",nocase; classtype:attempted-recon; sid:200017769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.vtihba.za.com",nocase; classtype:attempted-recon; sid:200017770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.vucabx.za.com",nocase; classtype:attempted-recon; sid:200017771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.vunivt.za.com",nocase; classtype:attempted-recon; sid:200017772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.vusnur.za.com",nocase; classtype:attempted-recon; sid:200017773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.wffxjj.za.com",nocase; classtype:attempted-recon; sid:200017774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.wssjge.za.com",nocase; classtype:attempted-recon; sid:200017775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.wylftw.za.com",nocase; classtype:attempted-recon; sid:200017776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.xioxfp.za.com",nocase; classtype:attempted-recon; sid:200017777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.xmigxe.za.com",nocase; classtype:attempted-recon; sid:200017778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.ygrkwy.za.com",nocase; classtype:attempted-recon; sid:200017779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.yjnkya.za.com",nocase; classtype:attempted-recon; sid:200017780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.ylvgii.za.com",nocase; classtype:attempted-recon; sid:200017781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.ymixml.za.com",nocase; classtype:attempted-recon; sid:200017782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.yoltyz.za.com",nocase; classtype:attempted-recon; sid:200017783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.yyciai.za.com",nocase; classtype:attempted-recon; sid:200017784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.zenagx.za.com",nocase; classtype:attempted-recon; sid:200017785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.zhafla.za.com",nocase; classtype:attempted-recon; sid:200017786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.ziqmtw.za.com",nocase; classtype:attempted-recon; sid:200017787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.ziuzyk.za.com",nocase; classtype:attempted-recon; sid:200017788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.zktobi.za.com",nocase; classtype:attempted-recon; sid:200017789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.zlppsf.za.com",nocase; classtype:attempted-recon; sid:200017790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.zrmusc.za.com",nocase; classtype:attempted-recon; sid:200017791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsceveci.vivsreaveesi.zudxug.za.com",nocase; classtype:attempted-recon; sid:200017792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.aiinpw.za.com",nocase; classtype:attempted-recon; sid:200017793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.apoljj.za.com",nocase; classtype:attempted-recon; sid:200017794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.axbhie.za.com",nocase; classtype:attempted-recon; sid:200017795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.cbargn.za.com",nocase; classtype:attempted-recon; sid:200017796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.cndiyk.za.com",nocase; classtype:attempted-recon; sid:200017797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.cnzlue.za.com",nocase; classtype:attempted-recon; sid:200017798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.cpclxs.za.com",nocase; classtype:attempted-recon; sid:200017799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.difkhu.za.com",nocase; classtype:attempted-recon; sid:200017800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.dnjggs.za.com",nocase; classtype:attempted-recon; sid:200017801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.dyjnbb.za.com",nocase; classtype:attempted-recon; sid:200017802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.epmgtc.za.com",nocase; classtype:attempted-recon; sid:200017803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.fflglh.za.com",nocase; classtype:attempted-recon; sid:200017804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.fjdayb.za.com",nocase; classtype:attempted-recon; sid:200017805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.flydpf.za.com",nocase; classtype:attempted-recon; sid:200017806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.fmdodt.za.com",nocase; classtype:attempted-recon; sid:200017807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.fmmfcz.za.com",nocase; classtype:attempted-recon; sid:200017808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.frghvs.za.com",nocase; classtype:attempted-recon; sid:200017809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.fyyfxo.za.com",nocase; classtype:attempted-recon; sid:200017810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.gbwdln.za.com",nocase; classtype:attempted-recon; sid:200017811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.gbxbjo.za.com",nocase; classtype:attempted-recon; sid:200017812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.hcnqqk.za.com",nocase; classtype:attempted-recon; sid:200017813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.iezkxp.za.com",nocase; classtype:attempted-recon; sid:200017814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.ifpdph.za.com",nocase; classtype:attempted-recon; sid:200017815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.jdjghn.za.com",nocase; classtype:attempted-recon; sid:200017816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.jpxnnz.za.com",nocase; classtype:attempted-recon; sid:200017817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.jygknw.za.com",nocase; classtype:attempted-recon; sid:200017818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.jzemci.za.com",nocase; classtype:attempted-recon; sid:200017819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.kzdaec.za.com",nocase; classtype:attempted-recon; sid:200017820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.lklgbt.za.com",nocase; classtype:attempted-recon; sid:200017821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.lqonrt.za.com",nocase; classtype:attempted-recon; sid:200017822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.lvuojw.za.com",nocase; classtype:attempted-recon; sid:200017823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.lymdeg.za.com",nocase; classtype:attempted-recon; sid:200017824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.mgfxpv.za.com",nocase; classtype:attempted-recon; sid:200017825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.nkgnxu.za.com",nocase; classtype:attempted-recon; sid:200017826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.nskxef.za.com",nocase; classtype:attempted-recon; sid:200017827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.nsrsyf.za.com",nocase; classtype:attempted-recon; sid:200017828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.ntmdlo.za.com",nocase; classtype:attempted-recon; sid:200017829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.nyapck.za.com",nocase; classtype:attempted-recon; sid:200017830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.obnjjr.za.com",nocase; classtype:attempted-recon; sid:200017831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.ojabvb.za.com",nocase; classtype:attempted-recon; sid:200017832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.peqrlu.za.com",nocase; classtype:attempted-recon; sid:200017833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.pfkndl.za.com",nocase; classtype:attempted-recon; sid:200017834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.pilzbq.za.com",nocase; classtype:attempted-recon; sid:200017835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.prfshi.za.com",nocase; classtype:attempted-recon; sid:200017836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.pruuwp.za.com",nocase; classtype:attempted-recon; sid:200017837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.pxwxmw.za.com",nocase; classtype:attempted-recon; sid:200017838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.qbkymz.za.com",nocase; classtype:attempted-recon; sid:200017839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.qigckf.za.com",nocase; classtype:attempted-recon; sid:200017840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.qsgdnx.za.com",nocase; classtype:attempted-recon; sid:200017841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.qyoqyz.za.com",nocase; classtype:attempted-recon; sid:200017842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.qytbke.za.com",nocase; classtype:attempted-recon; sid:200017843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.rouqjs.za.com",nocase; classtype:attempted-recon; sid:200017844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.rsxmth.za.com",nocase; classtype:attempted-recon; sid:200017845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.ryogde.za.com",nocase; classtype:attempted-recon; sid:200017846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.sbonjn.za.com",nocase; classtype:attempted-recon; sid:200017847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.sewril.za.com",nocase; classtype:attempted-recon; sid:200017848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.stghfe.za.com",nocase; classtype:attempted-recon; sid:200017849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.sznube.za.com",nocase; classtype:attempted-recon; sid:200017850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.taqabm.za.com",nocase; classtype:attempted-recon; sid:200017851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.trzfav.za.com",nocase; classtype:attempted-recon; sid:200017852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.uhdxmb.za.com",nocase; classtype:attempted-recon; sid:200017853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.uktqmo.za.com",nocase; classtype:attempted-recon; sid:200017854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.vhwplz.za.com",nocase; classtype:attempted-recon; sid:200017855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.vixxvg.za.com",nocase; classtype:attempted-recon; sid:200017856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.vjyswj.za.com",nocase; classtype:attempted-recon; sid:200017857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.vmmoue.za.com",nocase; classtype:attempted-recon; sid:200017858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.vnsscq.za.com",nocase; classtype:attempted-recon; sid:200017859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.vtihba.za.com",nocase; classtype:attempted-recon; sid:200017860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.vucabx.za.com",nocase; classtype:attempted-recon; sid:200017861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.vunivt.za.com",nocase; classtype:attempted-recon; sid:200017862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.vusnur.za.com",nocase; classtype:attempted-recon; sid:200017863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.wffxjj.za.com",nocase; classtype:attempted-recon; sid:200017864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.wssjge.za.com",nocase; classtype:attempted-recon; sid:200017865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.wylftw.za.com",nocase; classtype:attempted-recon; sid:200017866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.xioxfp.za.com",nocase; classtype:attempted-recon; sid:200017867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.xmigxe.za.com",nocase; classtype:attempted-recon; sid:200017868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.ygrkwy.za.com",nocase; classtype:attempted-recon; sid:200017869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.yjnkya.za.com",nocase; classtype:attempted-recon; sid:200017870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.ylvgii.za.com",nocase; classtype:attempted-recon; sid:200017871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.ymixml.za.com",nocase; classtype:attempted-recon; sid:200017872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.yoltyz.za.com",nocase; classtype:attempted-recon; sid:200017873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.yyciai.za.com",nocase; classtype:attempted-recon; sid:200017874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.zenagx.za.com",nocase; classtype:attempted-recon; sid:200017875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.zhafla.za.com",nocase; classtype:attempted-recon; sid:200017876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.ziqmtw.za.com",nocase; classtype:attempted-recon; sid:200017877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.ziuzyk.za.com",nocase; classtype:attempted-recon; sid:200017878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.zktobi.za.com",nocase; classtype:attempted-recon; sid:200017879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.zlppsf.za.com",nocase; classtype:attempted-recon; sid:200017880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.zrmusc.za.com",nocase; classtype:attempted-recon; sid:200017881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvscevei.vivsersvesi.zudxug.za.com",nocase; classtype:attempted-recon; sid:200017882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.exrjwh.top",nocase; classtype:attempted-recon; sid:200017883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.fbgnzp.top",nocase; classtype:attempted-recon; sid:200017884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.fgmlde.top",nocase; classtype:attempted-recon; sid:200017885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.fiwzrb.top",nocase; classtype:attempted-recon; sid:200017886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.fprrlq.top",nocase; classtype:attempted-recon; sid:200017887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.frhyqg.top",nocase; classtype:attempted-recon; sid:200017888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.fshxqm.top",nocase; classtype:attempted-recon; sid:200017889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.fynqxp.top",nocase; classtype:attempted-recon; sid:200017890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.fzcftf.top",nocase; classtype:attempted-recon; sid:200017891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.fzfweo.top",nocase; classtype:attempted-recon; sid:200017892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.gbbxdr.top",nocase; classtype:attempted-recon; sid:200017893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.ghdbbh.top",nocase; classtype:attempted-recon; sid:200017894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.ghqphy.top",nocase; classtype:attempted-recon; sid:200017895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.gjrbgg.top",nocase; classtype:attempted-recon; sid:200017896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.grliwz.top",nocase; classtype:attempted-recon; sid:200017897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.guxqvw.top",nocase; classtype:attempted-recon; sid:200017898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.gyaexz.top",nocase; classtype:attempted-recon; sid:200017899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.hgpqys.top",nocase; classtype:attempted-recon; sid:200017900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.hhksfr.top",nocase; classtype:attempted-recon; sid:200017901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.iktggq.top",nocase; classtype:attempted-recon; sid:200017902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.ilgzng.top",nocase; classtype:attempted-recon; sid:200017903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.ilpzgr.top",nocase; classtype:attempted-recon; sid:200017904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.irllcd.top",nocase; classtype:attempted-recon; sid:200017905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.iuruyp.top",nocase; classtype:attempted-recon; sid:200017906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.jfmfyj.top",nocase; classtype:attempted-recon; sid:200017907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.jubsfg.top",nocase; classtype:attempted-recon; sid:200017908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.jxavqz.top",nocase; classtype:attempted-recon; sid:200017909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.jxsfsm.top",nocase; classtype:attempted-recon; sid:200017910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.klgjib.top",nocase; classtype:attempted-recon; sid:200017911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.klvjnr.top",nocase; classtype:attempted-recon; sid:200017912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.kqdghn.top",nocase; classtype:attempted-recon; sid:200017913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.kqstye.top",nocase; classtype:attempted-recon; sid:200017914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.ksdadl.top",nocase; classtype:attempted-recon; sid:200017915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.kvtvic.top",nocase; classtype:attempted-recon; sid:200017916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.kxcepn.top",nocase; classtype:attempted-recon; sid:200017917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.laeyhc.top",nocase; classtype:attempted-recon; sid:200017918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.lhewuf.top",nocase; classtype:attempted-recon; sid:200017919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.ljsifw.top",nocase; classtype:attempted-recon; sid:200017920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.lrtzrp.top",nocase; classtype:attempted-recon; sid:200017921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.lsztbg.top",nocase; classtype:attempted-recon; sid:200017922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.lwxxqk.top",nocase; classtype:attempted-recon; sid:200017923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.mcbprf.top",nocase; classtype:attempted-recon; sid:200017924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.mddqbt.top",nocase; classtype:attempted-recon; sid:200017925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.mgandi.top",nocase; classtype:attempted-recon; sid:200017926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.mhgmuo.top",nocase; classtype:attempted-recon; sid:200017927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.mhnved.top",nocase; classtype:attempted-recon; sid:200017928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.mhxoyr.top",nocase; classtype:attempted-recon; sid:200017929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.mmcqln.top",nocase; classtype:attempted-recon; sid:200017930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.mravkx.top",nocase; classtype:attempted-recon; sid:200017931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.munzdr.top",nocase; classtype:attempted-recon; sid:200017932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.mwquzc.top",nocase; classtype:attempted-recon; sid:200017933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.mzrkkc.top",nocase; classtype:attempted-recon; sid:200017934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.najkys.top",nocase; classtype:attempted-recon; sid:200017935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.nbhlvc.top",nocase; classtype:attempted-recon; sid:200017936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.neidee.top",nocase; classtype:attempted-recon; sid:200017937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.ngtwxt.top",nocase; classtype:attempted-recon; sid:200017938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.njhpgs.top",nocase; classtype:attempted-recon; sid:200017939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.nmbqjh.top",nocase; classtype:attempted-recon; sid:200017940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.ntlhha.top",nocase; classtype:attempted-recon; sid:200017941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.nyzjio.top",nocase; classtype:attempted-recon; sid:200017942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.ojvntr.top",nocase; classtype:attempted-recon; sid:200017943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.opyxhy.top",nocase; classtype:attempted-recon; sid:200017944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.osqsyc.top",nocase; classtype:attempted-recon; sid:200017945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.owqbbi.top",nocase; classtype:attempted-recon; sid:200017946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.oycpxz.top",nocase; classtype:attempted-recon; sid:200017947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.pbkjie.top",nocase; classtype:attempted-recon; sid:200017948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.pdndft.top",nocase; classtype:attempted-recon; sid:200017949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.pgwcxp.top",nocase; classtype:attempted-recon; sid:200017950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.plqjhl.top",nocase; classtype:attempted-recon; sid:200017951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.poaixv.top",nocase; classtype:attempted-recon; sid:200017952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.pqpcgk.top",nocase; classtype:attempted-recon; sid:200017953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.pwnccs.top",nocase; classtype:attempted-recon; sid:200017954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.pxnctk.top",nocase; classtype:attempted-recon; sid:200017955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.pyseum.top",nocase; classtype:attempted-recon; sid:200017956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.pysitg.top",nocase; classtype:attempted-recon; sid:200017957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.qboxjl.top",nocase; classtype:attempted-recon; sid:200017958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.qjtfvg.top",nocase; classtype:attempted-recon; sid:200017959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.qnomqo.top",nocase; classtype:attempted-recon; sid:200017960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.qwudnh.top",nocase; classtype:attempted-recon; sid:200017961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.rataxm.top",nocase; classtype:attempted-recon; sid:200017962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.rchahv.top",nocase; classtype:attempted-recon; sid:200017963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.rhirhw.top",nocase; classtype:attempted-recon; sid:200017964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.rhwdsq.top",nocase; classtype:attempted-recon; sid:200017965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.rjfbqi.top",nocase; classtype:attempted-recon; sid:200017966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.rkafro.top",nocase; classtype:attempted-recon; sid:200017967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.exrjwh.top",nocase; classtype:attempted-recon; sid:200017968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.exxnjv.top",nocase; classtype:attempted-recon; sid:200017969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.fbgnzp.top",nocase; classtype:attempted-recon; sid:200017970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.fiwzrb.top",nocase; classtype:attempted-recon; sid:200017971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.fpezfd.top",nocase; classtype:attempted-recon; sid:200017972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.fprrlq.top",nocase; classtype:attempted-recon; sid:200017973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.frhyqg.top",nocase; classtype:attempted-recon; sid:200017974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.fshxqm.top",nocase; classtype:attempted-recon; sid:200017975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.fynqxp.top",nocase; classtype:attempted-recon; sid:200017976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.fzcftf.top",nocase; classtype:attempted-recon; sid:200017977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.gbbxdr.top",nocase; classtype:attempted-recon; sid:200017978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.ghdbbh.top",nocase; classtype:attempted-recon; sid:200017979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.ghqphy.top",nocase; classtype:attempted-recon; sid:200017980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.gjrbgg.top",nocase; classtype:attempted-recon; sid:200017981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.grliwz.top",nocase; classtype:attempted-recon; sid:200017982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.gtfvze.top",nocase; classtype:attempted-recon; sid:200017983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.guxqvw.top",nocase; classtype:attempted-recon; sid:200017984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.gyaexz.top",nocase; classtype:attempted-recon; sid:200017985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.hgpqys.top",nocase; classtype:attempted-recon; sid:200017986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.hhksfr.top",nocase; classtype:attempted-recon; sid:200017987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.iktggq.top",nocase; classtype:attempted-recon; sid:200017988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.irllcd.top",nocase; classtype:attempted-recon; sid:200017989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.iuruyp.top",nocase; classtype:attempted-recon; sid:200017990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.jdjubw.top",nocase; classtype:attempted-recon; sid:200017991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.jxavqz.top",nocase; classtype:attempted-recon; sid:200017992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.klgjib.top",nocase; classtype:attempted-recon; sid:200017993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.kqstye.top",nocase; classtype:attempted-recon; sid:200017994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.ksdadl.top",nocase; classtype:attempted-recon; sid:200017995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.kvtvic.top",nocase; classtype:attempted-recon; sid:200017996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.kxcepn.top",nocase; classtype:attempted-recon; sid:200017997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.laeyhc.top",nocase; classtype:attempted-recon; sid:200017998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.lhewuf.top",nocase; classtype:attempted-recon; sid:200017999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.ljsifw.top",nocase; classtype:attempted-recon; sid:200018000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.lrtzrp.top",nocase; classtype:attempted-recon; sid:200018001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.lsztbg.top",nocase; classtype:attempted-recon; sid:200018002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.ltineb.top",nocase; classtype:attempted-recon; sid:200018003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.lwxxqk.top",nocase; classtype:attempted-recon; sid:200018004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.mcbprf.top",nocase; classtype:attempted-recon; sid:200018005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.mdaxpz.top",nocase; classtype:attempted-recon; sid:200018006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.mddqbt.top",nocase; classtype:attempted-recon; sid:200018007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.mgandi.top",nocase; classtype:attempted-recon; sid:200018008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.mhnved.top",nocase; classtype:attempted-recon; sid:200018009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.mhxoyr.top",nocase; classtype:attempted-recon; sid:200018010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.mmcqln.top",nocase; classtype:attempted-recon; sid:200018011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.mravkx.top",nocase; classtype:attempted-recon; sid:200018012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.munzdr.top",nocase; classtype:attempted-recon; sid:200018013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.mwquzc.top",nocase; classtype:attempted-recon; sid:200018014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.mzrkkc.top",nocase; classtype:attempted-recon; sid:200018015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.najkys.top",nocase; classtype:attempted-recon; sid:200018016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.nbhlvc.top",nocase; classtype:attempted-recon; sid:200018017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.neidee.top",nocase; classtype:attempted-recon; sid:200018018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.ngtwxt.top",nocase; classtype:attempted-recon; sid:200018019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.njhpgs.top",nocase; classtype:attempted-recon; sid:200018020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.nmbqjh.top",nocase; classtype:attempted-recon; sid:200018021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.ntlhha.top",nocase; classtype:attempted-recon; sid:200018022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.nxuiqz.top",nocase; classtype:attempted-recon; sid:200018023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.nyzjio.top",nocase; classtype:attempted-recon; sid:200018024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.ofburn.top",nocase; classtype:attempted-recon; sid:200018025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.ohmatb.top",nocase; classtype:attempted-recon; sid:200018026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.ojvntr.top",nocase; classtype:attempted-recon; sid:200018027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.opyxhy.top",nocase; classtype:attempted-recon; sid:200018028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.owqbbi.top",nocase; classtype:attempted-recon; sid:200018029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.oycpxz.top",nocase; classtype:attempted-recon; sid:200018030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.pdndft.top",nocase; classtype:attempted-recon; sid:200018031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.pgwcxp.top",nocase; classtype:attempted-recon; sid:200018032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.plqjhl.top",nocase; classtype:attempted-recon; sid:200018033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.poaixv.top",nocase; classtype:attempted-recon; sid:200018034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.pqpcgk.top",nocase; classtype:attempted-recon; sid:200018035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.pwnccs.top",nocase; classtype:attempted-recon; sid:200018036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.pxnctk.top",nocase; classtype:attempted-recon; sid:200018037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.pyseum.top",nocase; classtype:attempted-recon; sid:200018038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.pysitg.top",nocase; classtype:attempted-recon; sid:200018039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.qboxjl.top",nocase; classtype:attempted-recon; sid:200018040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.qjtfvg.top",nocase; classtype:attempted-recon; sid:200018041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.qnomqo.top",nocase; classtype:attempted-recon; sid:200018042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.qwudnh.top",nocase; classtype:attempted-recon; sid:200018043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.rataxm.top",nocase; classtype:attempted-recon; sid:200018044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.rchahv.top",nocase; classtype:attempted-recon; sid:200018045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.rhirhw.top",nocase; classtype:attempted-recon; sid:200018046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.rhwdsq.top",nocase; classtype:attempted-recon; sid:200018047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.rjfbqi.top",nocase; classtype:attempted-recon; sid:200018048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.rkafro.top",nocase; classtype:attempted-recon; sid:200018049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.exrjwh.top",nocase; classtype:attempted-recon; sid:200018050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.exxnjv.top",nocase; classtype:attempted-recon; sid:200018051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.fbgnzp.top",nocase; classtype:attempted-recon; sid:200018052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.fiwzrb.top",nocase; classtype:attempted-recon; sid:200018053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.fpezfd.top",nocase; classtype:attempted-recon; sid:200018054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.fprrlq.top",nocase; classtype:attempted-recon; sid:200018055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.frhyqg.top",nocase; classtype:attempted-recon; sid:200018056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.fshxqm.top",nocase; classtype:attempted-recon; sid:200018057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.fynqxp.top",nocase; classtype:attempted-recon; sid:200018058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.fzcftf.top",nocase; classtype:attempted-recon; sid:200018059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.fzfweo.top",nocase; classtype:attempted-recon; sid:200018060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.gbbxdr.top",nocase; classtype:attempted-recon; sid:200018061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.ghdbbh.top",nocase; classtype:attempted-recon; sid:200018062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.ghqphy.top",nocase; classtype:attempted-recon; sid:200018063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.gjrbgg.top",nocase; classtype:attempted-recon; sid:200018064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.grliwz.top",nocase; classtype:attempted-recon; sid:200018065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.gtfvze.top",nocase; classtype:attempted-recon; sid:200018066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.guxqvw.top",nocase; classtype:attempted-recon; sid:200018067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.gyaexz.top",nocase; classtype:attempted-recon; sid:200018068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.hgpqys.top",nocase; classtype:attempted-recon; sid:200018069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.hhksfr.top",nocase; classtype:attempted-recon; sid:200018070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.iktggq.top",nocase; classtype:attempted-recon; sid:200018071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.ilgzng.top",nocase; classtype:attempted-recon; sid:200018072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.ilpzgr.top",nocase; classtype:attempted-recon; sid:200018073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.irllcd.top",nocase; classtype:attempted-recon; sid:200018074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.iuruyp.top",nocase; classtype:attempted-recon; sid:200018075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.jdjubw.top",nocase; classtype:attempted-recon; sid:200018076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.jubsfg.top",nocase; classtype:attempted-recon; sid:200018077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.jxavqz.top",nocase; classtype:attempted-recon; sid:200018078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.jxsfsm.top",nocase; classtype:attempted-recon; sid:200018079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.klgjib.top",nocase; classtype:attempted-recon; sid:200018080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.klvjnr.top",nocase; classtype:attempted-recon; sid:200018081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.kqdghn.top",nocase; classtype:attempted-recon; sid:200018082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.kqstye.top",nocase; classtype:attempted-recon; sid:200018083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.ksdadl.top",nocase; classtype:attempted-recon; sid:200018084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.lhewuf.top",nocase; classtype:attempted-recon; sid:200018085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.ljsifw.top",nocase; classtype:attempted-recon; sid:200018086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.lrtzrp.top",nocase; classtype:attempted-recon; sid:200018087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.lsztbg.top",nocase; classtype:attempted-recon; sid:200018088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.ltineb.top",nocase; classtype:attempted-recon; sid:200018089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.mcbprf.top",nocase; classtype:attempted-recon; sid:200018090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.mdaxpz.top",nocase; classtype:attempted-recon; sid:200018091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.mddqbt.top",nocase; classtype:attempted-recon; sid:200018092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.mgandi.top",nocase; classtype:attempted-recon; sid:200018093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.mhgmuo.top",nocase; classtype:attempted-recon; sid:200018094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.mhnved.top",nocase; classtype:attempted-recon; sid:200018095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.mhxoyr.top",nocase; classtype:attempted-recon; sid:200018096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.mmcqln.top",nocase; classtype:attempted-recon; sid:200018097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.mravkx.top",nocase; classtype:attempted-recon; sid:200018098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.munzdr.top",nocase; classtype:attempted-recon; sid:200018099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.mwquzc.top",nocase; classtype:attempted-recon; sid:200018100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.mzrkkc.top",nocase; classtype:attempted-recon; sid:200018101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.najkys.top",nocase; classtype:attempted-recon; sid:200018102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.neidee.top",nocase; classtype:attempted-recon; sid:200018103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.ngtwxt.top",nocase; classtype:attempted-recon; sid:200018104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.njhpgs.top",nocase; classtype:attempted-recon; sid:200018105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.ntlhha.top",nocase; classtype:attempted-recon; sid:200018106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.nxuiqz.top",nocase; classtype:attempted-recon; sid:200018107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.nyzjio.top",nocase; classtype:attempted-recon; sid:200018108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.ofburn.top",nocase; classtype:attempted-recon; sid:200018109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.ohmatb.top",nocase; classtype:attempted-recon; sid:200018110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.ojvntr.top",nocase; classtype:attempted-recon; sid:200018111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.opyxhy.top",nocase; classtype:attempted-recon; sid:200018112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.osqsyc.top",nocase; classtype:attempted-recon; sid:200018113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.owqbbi.top",nocase; classtype:attempted-recon; sid:200018114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.oycpxz.top",nocase; classtype:attempted-recon; sid:200018115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.pdndft.top",nocase; classtype:attempted-recon; sid:200018116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.pgwcxp.top",nocase; classtype:attempted-recon; sid:200018117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.plqjhl.top",nocase; classtype:attempted-recon; sid:200018118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.poaixv.top",nocase; classtype:attempted-recon; sid:200018119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.pwnccs.top",nocase; classtype:attempted-recon; sid:200018120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.pxnctk.top",nocase; classtype:attempted-recon; sid:200018121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.pyseum.top",nocase; classtype:attempted-recon; sid:200018122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.pysitg.top",nocase; classtype:attempted-recon; sid:200018123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.qboxjl.top",nocase; classtype:attempted-recon; sid:200018124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.qjtfvg.top",nocase; classtype:attempted-recon; sid:200018125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.qnomqo.top",nocase; classtype:attempted-recon; sid:200018126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.qwudnh.top",nocase; classtype:attempted-recon; sid:200018127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.rataxm.top",nocase; classtype:attempted-recon; sid:200018128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.rchahv.top",nocase; classtype:attempted-recon; sid:200018129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.rhirhw.top",nocase; classtype:attempted-recon; sid:200018130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.rhwdsq.top",nocase; classtype:attempted-recon; sid:200018131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.rjfbqi.top",nocase; classtype:attempted-recon; sid:200018132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.rkafro.top",nocase; classtype:attempted-recon; sid:200018133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.exrjwh.top",nocase; classtype:attempted-recon; sid:200018134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.exxnjv.top",nocase; classtype:attempted-recon; sid:200018135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.fbgnzp.top",nocase; classtype:attempted-recon; sid:200018136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.fgmlde.top",nocase; classtype:attempted-recon; sid:200018137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.fprrlq.top",nocase; classtype:attempted-recon; sid:200018138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.frhyqg.top",nocase; classtype:attempted-recon; sid:200018139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.fshxqm.top",nocase; classtype:attempted-recon; sid:200018140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.fynqxp.top",nocase; classtype:attempted-recon; sid:200018141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.fzcftf.top",nocase; classtype:attempted-recon; sid:200018142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.fzfweo.top",nocase; classtype:attempted-recon; sid:200018143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.gbbxdr.top",nocase; classtype:attempted-recon; sid:200018144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.ghdbbh.top",nocase; classtype:attempted-recon; sid:200018145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.ghqphy.top",nocase; classtype:attempted-recon; sid:200018146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.gjrbgg.top",nocase; classtype:attempted-recon; sid:200018147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.grliwz.top",nocase; classtype:attempted-recon; sid:200018148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.guxqvw.top",nocase; classtype:attempted-recon; sid:200018149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.gyaexz.top",nocase; classtype:attempted-recon; sid:200018150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.hgpqys.top",nocase; classtype:attempted-recon; sid:200018151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.hhksfr.top",nocase; classtype:attempted-recon; sid:200018152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.iktggq.top",nocase; classtype:attempted-recon; sid:200018153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.ilgzng.top",nocase; classtype:attempted-recon; sid:200018154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.ilpzgr.top",nocase; classtype:attempted-recon; sid:200018155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.iuruyp.top",nocase; classtype:attempted-recon; sid:200018156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.jdjubw.top",nocase; classtype:attempted-recon; sid:200018157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.jfmfyj.top",nocase; classtype:attempted-recon; sid:200018158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.jubsfg.top",nocase; classtype:attempted-recon; sid:200018159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.jxavqz.top",nocase; classtype:attempted-recon; sid:200018160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.jxsfsm.top",nocase; classtype:attempted-recon; sid:200018161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.klgjib.top",nocase; classtype:attempted-recon; sid:200018162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.klvjnr.top",nocase; classtype:attempted-recon; sid:200018163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.kqdghn.top",nocase; classtype:attempted-recon; sid:200018164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.kqstye.top",nocase; classtype:attempted-recon; sid:200018165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.ksdadl.top",nocase; classtype:attempted-recon; sid:200018166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.kvtvic.top",nocase; classtype:attempted-recon; sid:200018167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.kxcepn.top",nocase; classtype:attempted-recon; sid:200018168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.laeyhc.top",nocase; classtype:attempted-recon; sid:200018169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.lhewuf.top",nocase; classtype:attempted-recon; sid:200018170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.ljsifw.top",nocase; classtype:attempted-recon; sid:200018171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.lsztbg.top",nocase; classtype:attempted-recon; sid:200018172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.ltineb.top",nocase; classtype:attempted-recon; sid:200018173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.lwxxqk.top",nocase; classtype:attempted-recon; sid:200018174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.mcbprf.top",nocase; classtype:attempted-recon; sid:200018175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.mdaxpz.top",nocase; classtype:attempted-recon; sid:200018176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.mddqbt.top",nocase; classtype:attempted-recon; sid:200018177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.mhgmuo.top",nocase; classtype:attempted-recon; sid:200018178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.mhnved.top",nocase; classtype:attempted-recon; sid:200018179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.mhxoyr.top",nocase; classtype:attempted-recon; sid:200018180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.mravkx.top",nocase; classtype:attempted-recon; sid:200018181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.munzdr.top",nocase; classtype:attempted-recon; sid:200018182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.mwquzc.top",nocase; classtype:attempted-recon; sid:200018183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.mzrkkc.top",nocase; classtype:attempted-recon; sid:200018184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.najkys.top",nocase; classtype:attempted-recon; sid:200018185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.nbhlvc.top",nocase; classtype:attempted-recon; sid:200018186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.neidee.top",nocase; classtype:attempted-recon; sid:200018187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.ngtwxt.top",nocase; classtype:attempted-recon; sid:200018188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.njhpgs.top",nocase; classtype:attempted-recon; sid:200018189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.nmbqjh.top",nocase; classtype:attempted-recon; sid:200018190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.ntlhha.top",nocase; classtype:attempted-recon; sid:200018191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.nxuiqz.top",nocase; classtype:attempted-recon; sid:200018192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.nyzjio.top",nocase; classtype:attempted-recon; sid:200018193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.ofburn.top",nocase; classtype:attempted-recon; sid:200018194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.ohmatb.top",nocase; classtype:attempted-recon; sid:200018195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.ojvntr.top",nocase; classtype:attempted-recon; sid:200018196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.opyxhy.top",nocase; classtype:attempted-recon; sid:200018197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.osqsyc.top",nocase; classtype:attempted-recon; sid:200018198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.owqbbi.top",nocase; classtype:attempted-recon; sid:200018199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.oycpxz.top",nocase; classtype:attempted-recon; sid:200018200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.pbkjie.top",nocase; classtype:attempted-recon; sid:200018201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.pdndft.top",nocase; classtype:attempted-recon; sid:200018202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.pgltrg.top",nocase; classtype:attempted-recon; sid:200018203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.pgwcxp.top",nocase; classtype:attempted-recon; sid:200018204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.plqjhl.top",nocase; classtype:attempted-recon; sid:200018205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.poaixv.top",nocase; classtype:attempted-recon; sid:200018206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.pqpcgk.top",nocase; classtype:attempted-recon; sid:200018207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.pwnccs.top",nocase; classtype:attempted-recon; sid:200018208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.pxnctk.top",nocase; classtype:attempted-recon; sid:200018209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.pyseum.top",nocase; classtype:attempted-recon; sid:200018210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.pysitg.top",nocase; classtype:attempted-recon; sid:200018211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.qboxjl.top",nocase; classtype:attempted-recon; sid:200018212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.qjtfvg.top",nocase; classtype:attempted-recon; sid:200018213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.qnomqo.top",nocase; classtype:attempted-recon; sid:200018214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.qwudnh.top",nocase; classtype:attempted-recon; sid:200018215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.rataxm.top",nocase; classtype:attempted-recon; sid:200018216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.rchahv.top",nocase; classtype:attempted-recon; sid:200018217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.rhirhw.top",nocase; classtype:attempted-recon; sid:200018218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.rhwdsq.top",nocase; classtype:attempted-recon; sid:200018219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.rjfbqi.top",nocase; classtype:attempted-recon; sid:200018220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.rkafro.top",nocase; classtype:attempted-recon; sid:200018221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.02vk.top",nocase; classtype:attempted-recon; sid:200018222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200018223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.afevzf.top",nocase; classtype:attempted-recon; sid:200018224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200018225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200018226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200018227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.balaet.icu",nocase; classtype:attempted-recon; sid:200018228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200018229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200018230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.bporry.top",nocase; classtype:attempted-recon; sid:200018231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.bspybm.top",nocase; classtype:attempted-recon; sid:200018232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200018233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200018234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200018235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200018236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200018237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.cntxao.top",nocase; classtype:attempted-recon; sid:200018238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.coflya.top",nocase; classtype:attempted-recon; sid:200018239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200018240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.craycraft.top",nocase; classtype:attempted-recon; sid:200018241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.cwadib.top",nocase; classtype:attempted-recon; sid:200018242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200018243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200018244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.dauexk.top",nocase; classtype:attempted-recon; sid:200018245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200018246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200018247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200018248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200018249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200018250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200018251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200018252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.elhicw.top",nocase; classtype:attempted-recon; sid:200018253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200018254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200018255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200018256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.exoysm.top",nocase; classtype:attempted-recon; sid:200018257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200018258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200018259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200018260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200018261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200018262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200018263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.iooazb.top",nocase; classtype:attempted-recon; sid:200018264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200018265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200018266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200018267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200018268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.kpblio.top",nocase; classtype:attempted-recon; sid:200018269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.lenorv.top",nocase; classtype:attempted-recon; sid:200018270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200018271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200018272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200018273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200018274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200018275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.pkilix.top",nocase; classtype:attempted-recon; sid:200018276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200018277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.ronipp.top",nocase; classtype:attempted-recon; sid:200018278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200018279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200018280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200018281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200018282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200018283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200018284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.shaot.icu",nocase; classtype:attempted-recon; sid:200018285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200018286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200018287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200018288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200018289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200018290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200018291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.ufihby.top",nocase; classtype:attempted-recon; sid:200018292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.upuphone.group",nocase; classtype:attempted-recon; sid:200018293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200018294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.urekwh.top",nocase; classtype:attempted-recon; sid:200018295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200018296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.vozep.icu",nocase; classtype:attempted-recon; sid:200018297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.wbziul.top",nocase; classtype:attempted-recon; sid:200018298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200018299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.wetot.icu",nocase; classtype:attempted-recon; sid:200018300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.wetot.life",nocase; classtype:attempted-recon; sid:200018301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200018302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.wingfh.top",nocase; classtype:attempted-recon; sid:200018303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200018304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200018305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200018306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200018307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200018308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.xudixq.top",nocase; classtype:attempted-recon; sid:200018309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200018310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200018311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200018312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200018313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200018314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200018315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200018316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200018317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200018318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200018319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.znegsr.top",nocase; classtype:attempted-recon; sid:200018320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.zynepg.top",nocase; classtype:attempted-recon; sid:200018321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.02vk.top",nocase; classtype:attempted-recon; sid:200018322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200018323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.afevzf.top",nocase; classtype:attempted-recon; sid:200018324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200018325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200018326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200018327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.balaet.icu",nocase; classtype:attempted-recon; sid:200018328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200018329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200018330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200018331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.bporry.top",nocase; classtype:attempted-recon; sid:200018332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.bspybm.top",nocase; classtype:attempted-recon; sid:200018333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200018334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200018335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200018336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200018337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.cntxao.top",nocase; classtype:attempted-recon; sid:200018338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.coflya.top",nocase; classtype:attempted-recon; sid:200018339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200018340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.craycraft.top",nocase; classtype:attempted-recon; sid:200018341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.cwadib.top",nocase; classtype:attempted-recon; sid:200018342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200018343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200018344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.dauexk.top",nocase; classtype:attempted-recon; sid:200018345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200018346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200018347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200018348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200018349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200018350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200018351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200018352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200018353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200018354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.elhicw.top",nocase; classtype:attempted-recon; sid:200018355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200018356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200018357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.exoysm.top",nocase; classtype:attempted-recon; sid:200018358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200018359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200018360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200018361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200018362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200018363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200018364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200018365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200018366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.iooazb.top",nocase; classtype:attempted-recon; sid:200018367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200018368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200018369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200018370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.kpblio.top",nocase; classtype:attempted-recon; sid:200018371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.lenorv.top",nocase; classtype:attempted-recon; sid:200018372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200018373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200018374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200018375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200018376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200018377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200018378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200018379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200018380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.ronipp.top",nocase; classtype:attempted-recon; sid:200018381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200018382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200018383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200018384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200018385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200018386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200018387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.shaot.icu",nocase; classtype:attempted-recon; sid:200018388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200018389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200018390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200018391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200018392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.ufihby.top",nocase; classtype:attempted-recon; sid:200018393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.upuphone.group",nocase; classtype:attempted-recon; sid:200018394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200018395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.urekwh.top",nocase; classtype:attempted-recon; sid:200018396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200018397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.vozep.icu",nocase; classtype:attempted-recon; sid:200018398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200018399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.wbziul.top",nocase; classtype:attempted-recon; sid:200018400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200018401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200018402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.wetot.icu",nocase; classtype:attempted-recon; sid:200018403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.wetot.life",nocase; classtype:attempted-recon; sid:200018404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200018405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.wingfh.top",nocase; classtype:attempted-recon; sid:200018406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200018407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200018408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200018409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200018410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200018411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.xudixq.top",nocase; classtype:attempted-recon; sid:200018412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200018413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200018414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.yavkol.top",nocase; classtype:attempted-recon; sid:200018415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200018416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200018417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200018418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200018419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200018420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200018421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200018422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.znegsr.top",nocase; classtype:attempted-recon; sid:200018423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.zynepg.top",nocase; classtype:attempted-recon; sid:200018424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.02vk.top",nocase; classtype:attempted-recon; sid:200018425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200018426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.afevzf.top",nocase; classtype:attempted-recon; sid:200018427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200018428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200018429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200018430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.balaet.icu",nocase; classtype:attempted-recon; sid:200018431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200018432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200018433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200018434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.bporry.top",nocase; classtype:attempted-recon; sid:200018435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.bspybm.top",nocase; classtype:attempted-recon; sid:200018436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200018437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200018438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200018439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200018440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200018441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.cntxao.top",nocase; classtype:attempted-recon; sid:200018442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200018443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.craycraft.top",nocase; classtype:attempted-recon; sid:200018444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.cwadib.top",nocase; classtype:attempted-recon; sid:200018445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200018446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200018447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.dauexk.top",nocase; classtype:attempted-recon; sid:200018448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200018449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200018450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200018451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200018452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200018453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200018454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200018455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200018456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200018457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.elhicw.top",nocase; classtype:attempted-recon; sid:200018458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200018459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200018460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200018461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.exoysm.top",nocase; classtype:attempted-recon; sid:200018462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200018463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200018464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200018465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200018466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200018467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200018468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200018469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200018470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.iooazb.top",nocase; classtype:attempted-recon; sid:200018471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200018472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200018473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200018474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.kpblio.top",nocase; classtype:attempted-recon; sid:200018475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.lenorv.top",nocase; classtype:attempted-recon; sid:200018476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200018477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200018478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200018479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200018480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200018481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.pkilix.top",nocase; classtype:attempted-recon; sid:200018482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200018483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200018484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200018485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200018486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.ronipp.top",nocase; classtype:attempted-recon; sid:200018487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200018488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200018489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200018490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200018491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200018492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.shaot.icu",nocase; classtype:attempted-recon; sid:200018493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200018494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200018495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200018496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200018497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200018498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.ufihby.top",nocase; classtype:attempted-recon; sid:200018499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.upuphone.group",nocase; classtype:attempted-recon; sid:200018500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200018501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.urekwh.top",nocase; classtype:attempted-recon; sid:200018502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200018503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.vozep.icu",nocase; classtype:attempted-recon; sid:200018504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200018505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.wbziul.top",nocase; classtype:attempted-recon; sid:200018506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200018507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200018508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.wetot.icu",nocase; classtype:attempted-recon; sid:200018509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.wetot.life",nocase; classtype:attempted-recon; sid:200018510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200018511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.wingfh.top",nocase; classtype:attempted-recon; sid:200018512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200018513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200018514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200018515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200018516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200018517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.xudixq.top",nocase; classtype:attempted-recon; sid:200018518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200018519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200018520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200018521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.yavkol.top",nocase; classtype:attempted-recon; sid:200018522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200018523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200018524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200018525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200018526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200018527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200018528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.znegsr.top",nocase; classtype:attempted-recon; sid:200018529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.zynepg.top",nocase; classtype:attempted-recon; sid:200018530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.02vk.top",nocase; classtype:attempted-recon; sid:200018531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.abzcr.icu",nocase; classtype:attempted-recon; sid:200018532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.afevzf.top",nocase; classtype:attempted-recon; sid:200018533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200018534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200018535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.badkfs.icu",nocase; classtype:attempted-recon; sid:200018536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.balaet.icu",nocase; classtype:attempted-recon; sid:200018537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200018538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.benefitted.icu",nocase; classtype:attempted-recon; sid:200018539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.bjexfe.top",nocase; classtype:attempted-recon; sid:200018540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.bporry.top",nocase; classtype:attempted-recon; sid:200018541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.bspybm.top",nocase; classtype:attempted-recon; sid:200018542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200018543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.ccvjar.top",nocase; classtype:attempted-recon; sid:200018544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.cipqzd.top",nocase; classtype:attempted-recon; sid:200018545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200018546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200018547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.cntxao.top",nocase; classtype:attempted-recon; sid:200018548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.coflya.top",nocase; classtype:attempted-recon; sid:200018549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.cpgspk.top",nocase; classtype:attempted-recon; sid:200018550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.craycraft.top",nocase; classtype:attempted-recon; sid:200018551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.cwadib.top",nocase; classtype:attempted-recon; sid:200018552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.cyqggi.top",nocase; classtype:attempted-recon; sid:200018553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200018554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.dauexk.top",nocase; classtype:attempted-recon; sid:200018555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.dhwynj.top",nocase; classtype:attempted-recon; sid:200018556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.digitize.ltd",nocase; classtype:attempted-recon; sid:200018557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200018558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.dpqshv.top",nocase; classtype:attempted-recon; sid:200018559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200018560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.dtyweh.top",nocase; classtype:attempted-recon; sid:200018561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.dyugxj.top",nocase; classtype:attempted-recon; sid:200018562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.ehngpw.top",nocase; classtype:attempted-recon; sid:200018563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200018564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.elhicw.top",nocase; classtype:attempted-recon; sid:200018565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.enkzhe.top",nocase; classtype:attempted-recon; sid:200018566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.eucvbc.top",nocase; classtype:attempted-recon; sid:200018567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.evyqhg.top",nocase; classtype:attempted-recon; sid:200018568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.exoysm.top",nocase; classtype:attempted-recon; sid:200018569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.fgcew.icu",nocase; classtype:attempted-recon; sid:200018570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.fksiud.icu",nocase; classtype:attempted-recon; sid:200018571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.fvqetn.top",nocase; classtype:attempted-recon; sid:200018572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.htixjser.icu",nocase; classtype:attempted-recon; sid:200018573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200018574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200018575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.iooazb.top",nocase; classtype:attempted-recon; sid:200018576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.jdftpe.top",nocase; classtype:attempted-recon; sid:200018577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.jdqomw.top",nocase; classtype:attempted-recon; sid:200018578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.jkoozw.top",nocase; classtype:attempted-recon; sid:200018579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.jtuet.icu",nocase; classtype:attempted-recon; sid:200018580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.kpblio.top",nocase; classtype:attempted-recon; sid:200018581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.lenorv.top",nocase; classtype:attempted-recon; sid:200018582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.mavbpi.top",nocase; classtype:attempted-recon; sid:200018583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.mkpiab.top",nocase; classtype:attempted-recon; sid:200018584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.mqiwux.top",nocase; classtype:attempted-recon; sid:200018585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.msiesya.icu",nocase; classtype:attempted-recon; sid:200018586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200018587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.pkilix.top",nocase; classtype:attempted-recon; sid:200018588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.pvhngq.top",nocase; classtype:attempted-recon; sid:200018589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.qskgtg.top",nocase; classtype:attempted-recon; sid:200018590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.quvhdd.top",nocase; classtype:attempted-recon; sid:200018591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200018592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.ronipp.top",nocase; classtype:attempted-recon; sid:200018593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200018594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.sctgkq.top",nocase; classtype:attempted-recon; sid:200018595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200018596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.sejmqk.top",nocase; classtype:attempted-recon; sid:200018597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200018598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.shaot.icu",nocase; classtype:attempted-recon; sid:200018599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200018600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200018601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.tqmskg.top",nocase; classtype:attempted-recon; sid:200018602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.ttxupv.top",nocase; classtype:attempted-recon; sid:200018603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200018604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.ubdjag.top",nocase; classtype:attempted-recon; sid:200018605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.upuphone.group",nocase; classtype:attempted-recon; sid:200018606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.urekwh.top",nocase; classtype:attempted-recon; sid:200018607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.vfchrz.top",nocase; classtype:attempted-recon; sid:200018608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.wbvazy.top",nocase; classtype:attempted-recon; sid:200018609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.wbziul.top",nocase; classtype:attempted-recon; sid:200018610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200018611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.wehqxs.top",nocase; classtype:attempted-recon; sid:200018612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.wetot.icu",nocase; classtype:attempted-recon; sid:200018613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.wgipfc.top",nocase; classtype:attempted-recon; sid:200018614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.wingfh.top",nocase; classtype:attempted-recon; sid:200018615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200018616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.wyisqr.top",nocase; classtype:attempted-recon; sid:200018617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200018618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.xlrppx.top",nocase; classtype:attempted-recon; sid:200018619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200018620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.xudixq.top",nocase; classtype:attempted-recon; sid:200018621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.xvtayq.top",nocase; classtype:attempted-recon; sid:200018622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.yanwen.cc",nocase; classtype:attempted-recon; sid:200018623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.yavkol.top",nocase; classtype:attempted-recon; sid:200018624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.yhitbg.top",nocase; classtype:attempted-recon; sid:200018625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.yqzemo.top",nocase; classtype:attempted-recon; sid:200018626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.ytvuml.top",nocase; classtype:attempted-recon; sid:200018627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.zblgxm.top",nocase; classtype:attempted-recon; sid:200018628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200018629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200018630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.znegsr.top",nocase; classtype:attempted-recon; sid:200018631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.zynepg.top",nocase; classtype:attempted-recon; sid:200018632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.02vk.top",nocase; classtype:attempted-recon; sid:200018633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200018634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.afevzf.top",nocase; classtype:attempted-recon; sid:200018635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200018636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200018637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200018638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.balaet.icu",nocase; classtype:attempted-recon; sid:200018639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200018640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200018641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.bporry.top",nocase; classtype:attempted-recon; sid:200018642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.bspybm.top",nocase; classtype:attempted-recon; sid:200018643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200018644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200018645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200018646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200018647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.cntxao.top",nocase; classtype:attempted-recon; sid:200018648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.coflya.top",nocase; classtype:attempted-recon; sid:200018649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200018650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.craycraft.top",nocase; classtype:attempted-recon; sid:200018651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.cwadib.top",nocase; classtype:attempted-recon; sid:200018652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200018653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200018654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.dauexk.top",nocase; classtype:attempted-recon; sid:200018655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200018656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200018657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200018658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200018659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200018660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200018661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200018662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200018663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.elhicw.top",nocase; classtype:attempted-recon; sid:200018664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200018665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200018666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200018667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.exoysm.top",nocase; classtype:attempted-recon; sid:200018668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200018669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200018670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200018671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200018672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200018673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200018674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200018675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.iooazb.top",nocase; classtype:attempted-recon; sid:200018676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200018677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200018678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200018679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200018680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.kpblio.top",nocase; classtype:attempted-recon; sid:200018681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.lenorv.top",nocase; classtype:attempted-recon; sid:200018682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200018683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200018684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200018685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200018686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200018687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.pkilix.top",nocase; classtype:attempted-recon; sid:200018688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200018689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200018690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200018691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200018692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.ronipp.top",nocase; classtype:attempted-recon; sid:200018693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200018694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200018695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200018696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200018697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200018698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.shaot.icu",nocase; classtype:attempted-recon; sid:200018699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200018700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200018701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200018702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200018703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200018704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200018705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.ufihby.top",nocase; classtype:attempted-recon; sid:200018706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.upuphone.group",nocase; classtype:attempted-recon; sid:200018707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200018708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.urekwh.top",nocase; classtype:attempted-recon; sid:200018709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200018710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.vozep.icu",nocase; classtype:attempted-recon; sid:200018711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200018712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.wbziul.top",nocase; classtype:attempted-recon; sid:200018713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200018714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200018715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.wetot.icu",nocase; classtype:attempted-recon; sid:200018716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.wetot.life",nocase; classtype:attempted-recon; sid:200018717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200018718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.wingfh.top",nocase; classtype:attempted-recon; sid:200018719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200018720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200018721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200018722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200018723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200018724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.xudixq.top",nocase; classtype:attempted-recon; sid:200018725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200018726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200018727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200018728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.yavkol.top",nocase; classtype:attempted-recon; sid:200018729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200018730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200018731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200018732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200018733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200018734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200018735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.zynepg.top",nocase; classtype:attempted-recon; sid:200018736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200018737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.afevzf.top",nocase; classtype:attempted-recon; sid:200018738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200018739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200018740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200018741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200018742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.bporry.top",nocase; classtype:attempted-recon; sid:200018743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.bspybm.top",nocase; classtype:attempted-recon; sid:200018744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200018745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200018746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.cntxao.top",nocase; classtype:attempted-recon; sid:200018747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.coflya.top",nocase; classtype:attempted-recon; sid:200018748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200018749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.craycraft.top",nocase; classtype:attempted-recon; sid:200018750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.cwadib.top",nocase; classtype:attempted-recon; sid:200018751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200018752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200018753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.dauexk.top",nocase; classtype:attempted-recon; sid:200018754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200018755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200018756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200018757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200018758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200018759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200018760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200018761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200018762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.elhicw.top",nocase; classtype:attempted-recon; sid:200018763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200018764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200018765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200018766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.exoysm.top",nocase; classtype:attempted-recon; sid:200018767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200018768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200018769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200018770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200018771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200018772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200018773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200018774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.iooazb.top",nocase; classtype:attempted-recon; sid:200018775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200018776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200018777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200018778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200018779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.kpblio.top",nocase; classtype:attempted-recon; sid:200018780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.lenorv.top",nocase; classtype:attempted-recon; sid:200018781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200018782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200018783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200018784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200018785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200018786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.pkilix.top",nocase; classtype:attempted-recon; sid:200018787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200018788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200018789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200018790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200018791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.ronipp.top",nocase; classtype:attempted-recon; sid:200018792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200018793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200018794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200018795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200018796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200018797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.shaot.icu",nocase; classtype:attempted-recon; sid:200018798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200018799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200018800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200018801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200018802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200018803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.ufihby.top",nocase; classtype:attempted-recon; sid:200018804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.upuphone.group",nocase; classtype:attempted-recon; sid:200018805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200018806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.urekwh.top",nocase; classtype:attempted-recon; sid:200018807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200018808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.vozep.icu",nocase; classtype:attempted-recon; sid:200018809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200018810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.wbziul.top",nocase; classtype:attempted-recon; sid:200018811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200018812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200018813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.wetot.icu",nocase; classtype:attempted-recon; sid:200018814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.wetot.life",nocase; classtype:attempted-recon; sid:200018815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200018816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.wingfh.top",nocase; classtype:attempted-recon; sid:200018817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200018818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200018819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200018820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200018821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200018822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.xudixq.top",nocase; classtype:attempted-recon; sid:200018823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200018824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200018825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200018826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.yavkol.top",nocase; classtype:attempted-recon; sid:200018827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200018828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200018829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200018830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200018831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200018832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200018833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200018834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.znegsr.top",nocase; classtype:attempted-recon; sid:200018835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.zynepg.top",nocase; classtype:attempted-recon; sid:200018836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.02vk.top",nocase; classtype:attempted-recon; sid:200018837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200018838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.afevzf.top",nocase; classtype:attempted-recon; sid:200018839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200018840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200018841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200018842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.balaet.icu",nocase; classtype:attempted-recon; sid:200018843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200018844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200018845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200018846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.bporry.top",nocase; classtype:attempted-recon; sid:200018847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.bspybm.top",nocase; classtype:attempted-recon; sid:200018848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200018849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200018850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200018851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200018852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200018853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.cntxao.top",nocase; classtype:attempted-recon; sid:200018854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.coflya.top",nocase; classtype:attempted-recon; sid:200018855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200018856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.craycraft.top",nocase; classtype:attempted-recon; sid:200018857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.cwadib.top",nocase; classtype:attempted-recon; sid:200018858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200018859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200018860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.dauexk.top",nocase; classtype:attempted-recon; sid:200018861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200018862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200018863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200018864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200018865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200018866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200018867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200018868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200018869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200018870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.elhicw.top",nocase; classtype:attempted-recon; sid:200018871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200018872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200018873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.exoysm.top",nocase; classtype:attempted-recon; sid:200018874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200018875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200018876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200018877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200018878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200018879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200018880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200018881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.iooazb.top",nocase; classtype:attempted-recon; sid:200018882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200018883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200018884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200018885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200018886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.kpblio.top",nocase; classtype:attempted-recon; sid:200018887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.lenorv.top",nocase; classtype:attempted-recon; sid:200018888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200018889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200018890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200018891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200018892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200018893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.pkilix.top",nocase; classtype:attempted-recon; sid:200018894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200018895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200018896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200018897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.ronipp.top",nocase; classtype:attempted-recon; sid:200018898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200018899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200018900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200018901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200018902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200018903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200018904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.shaot.icu",nocase; classtype:attempted-recon; sid:200018905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200018906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200018907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200018908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200018909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200018910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200018911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.ufihby.top",nocase; classtype:attempted-recon; sid:200018912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200018913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.urekwh.top",nocase; classtype:attempted-recon; sid:200018914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200018915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.vozep.icu",nocase; classtype:attempted-recon; sid:200018916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200018917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.wbziul.top",nocase; classtype:attempted-recon; sid:200018918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200018919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200018920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.wetot.icu",nocase; classtype:attempted-recon; sid:200018921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.wetot.life",nocase; classtype:attempted-recon; sid:200018922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200018923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.wingfh.top",nocase; classtype:attempted-recon; sid:200018924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200018925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200018926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200018927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200018928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.xudixq.top",nocase; classtype:attempted-recon; sid:200018929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200018930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200018931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.yavkol.top",nocase; classtype:attempted-recon; sid:200018932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200018933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200018934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200018935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200018936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200018937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200018938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200018939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.znegsr.top",nocase; classtype:attempted-recon; sid:200018940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.zynepg.top",nocase; classtype:attempted-recon; sid:200018941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.02vk.top",nocase; classtype:attempted-recon; sid:200018942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200018943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200018944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200018945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200018946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.balaet.icu",nocase; classtype:attempted-recon; sid:200018947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200018948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200018949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.bporry.top",nocase; classtype:attempted-recon; sid:200018950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.bspybm.top",nocase; classtype:attempted-recon; sid:200018951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200018952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200018953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200018954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200018955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200018956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.cntxao.top",nocase; classtype:attempted-recon; sid:200018957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.coflya.top",nocase; classtype:attempted-recon; sid:200018958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200018959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.craycraft.top",nocase; classtype:attempted-recon; sid:200018960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.cwadib.top",nocase; classtype:attempted-recon; sid:200018961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200018962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.dauexk.top",nocase; classtype:attempted-recon; sid:200018963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200018964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200018965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200018966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200018967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200018968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200018969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200018970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200018971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200018972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.elhicw.top",nocase; classtype:attempted-recon; sid:200018973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200018974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200018975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200018976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.exoysm.top",nocase; classtype:attempted-recon; sid:200018977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200018978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200018979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200018980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200018981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200018982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200018983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200018984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200018985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.iooazb.top",nocase; classtype:attempted-recon; sid:200018986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200018987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200018988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200018989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.kpblio.top",nocase; classtype:attempted-recon; sid:200018990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.lenorv.top",nocase; classtype:attempted-recon; sid:200018991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200018992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200018993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200018994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200018995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.pkilix.top",nocase; classtype:attempted-recon; sid:200018996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200018997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200018998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200018999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200019000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200019001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200019002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200019003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200019004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200019005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200019006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.shaot.icu",nocase; classtype:attempted-recon; sid:200019007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200019008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200019009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200019010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200019011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200019012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200019013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.ufihby.top",nocase; classtype:attempted-recon; sid:200019014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.upuphone.group",nocase; classtype:attempted-recon; sid:200019015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200019016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.urekwh.top",nocase; classtype:attempted-recon; sid:200019017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200019018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.vozep.icu",nocase; classtype:attempted-recon; sid:200019019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.wbziul.top",nocase; classtype:attempted-recon; sid:200019020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200019021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200019022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.wetot.icu",nocase; classtype:attempted-recon; sid:200019023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.wetot.life",nocase; classtype:attempted-recon; sid:200019024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200019025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.wingfh.top",nocase; classtype:attempted-recon; sid:200019026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200019027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200019028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200019029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200019030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.xudixq.top",nocase; classtype:attempted-recon; sid:200019031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200019032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200019033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200019034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200019035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200019036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200019037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200019038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200019039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200019040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200019041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.znegsr.top",nocase; classtype:attempted-recon; sid:200019042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.zynepg.top",nocase; classtype:attempted-recon; sid:200019043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicwetfmab.duckdns.org",nocase; classtype:attempted-recon; sid:200019044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"video-vip.zzux.com",nocase; classtype:attempted-recon; sid:200019045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieal.hyperphp.com",nocase; classtype:attempted-recon; sid:200019046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.a8m6di.icu",nocase; classtype:attempted-recon; sid:200019047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.aaxbpo.top",nocase; classtype:attempted-recon; sid:200019048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.adpslp.top",nocase; classtype:attempted-recon; sid:200019049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.aenjkw.top",nocase; classtype:attempted-recon; sid:200019050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.agdhkb.top",nocase; classtype:attempted-recon; sid:200019051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.akgjcb.top",nocase; classtype:attempted-recon; sid:200019052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.baelbg.top",nocase; classtype:attempted-recon; sid:200019053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200019054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.bkwgho.top",nocase; classtype:attempted-recon; sid:200019055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.bmknvf.top",nocase; classtype:attempted-recon; sid:200019056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.buzmri.top",nocase; classtype:attempted-recon; sid:200019057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.dgckut.top",nocase; classtype:attempted-recon; sid:200019058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.djtela.top",nocase; classtype:attempted-recon; sid:200019059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.dlhsif.top",nocase; classtype:attempted-recon; sid:200019060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.dnoftm.top",nocase; classtype:attempted-recon; sid:200019061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.doxryd.top",nocase; classtype:attempted-recon; sid:200019062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.dwxrym.top",nocase; classtype:attempted-recon; sid:200019063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.dy1nam.icu",nocase; classtype:attempted-recon; sid:200019064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.efcgly.icu",nocase; classtype:attempted-recon; sid:200019065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ejvyvo.top",nocase; classtype:attempted-recon; sid:200019066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.erkzgb.top",nocase; classtype:attempted-recon; sid:200019067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.erqvhz.icu",nocase; classtype:attempted-recon; sid:200019068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ewhdkk.top",nocase; classtype:attempted-recon; sid:200019069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.flgapj.top",nocase; classtype:attempted-recon; sid:200019070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200019071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.fviult.icu",nocase; classtype:attempted-recon; sid:200019072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.fwgrbb.top",nocase; classtype:attempted-recon; sid:200019073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.fxfbld.top",nocase; classtype:attempted-recon; sid:200019074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.gpik9c.icu",nocase; classtype:attempted-recon; sid:200019075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200019076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.hihmof.top",nocase; classtype:attempted-recon; sid:200019077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200019078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.hstoja.top",nocase; classtype:attempted-recon; sid:200019079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.icbupe.icu",nocase; classtype:attempted-recon; sid:200019080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ikjthi.top",nocase; classtype:attempted-recon; sid:200019081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ileuct.top",nocase; classtype:attempted-recon; sid:200019082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.iobrjq.icu",nocase; classtype:attempted-recon; sid:200019083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.iyfkny.top",nocase; classtype:attempted-recon; sid:200019084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.jashxw.icu",nocase; classtype:attempted-recon; sid:200019085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.jfqejr.icu",nocase; classtype:attempted-recon; sid:200019086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.joziry.top",nocase; classtype:attempted-recon; sid:200019087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.jvquad.top",nocase; classtype:attempted-recon; sid:200019088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.jvzxml.top",nocase; classtype:attempted-recon; sid:200019089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.jyszpt.top",nocase; classtype:attempted-recon; sid:200019090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.kdhnlt.top",nocase; classtype:attempted-recon; sid:200019091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.keud7w.icu",nocase; classtype:attempted-recon; sid:200019092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.kgflqd.top",nocase; classtype:attempted-recon; sid:200019093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.kkvrke.icu",nocase; classtype:attempted-recon; sid:200019094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.kosoht.icu",nocase; classtype:attempted-recon; sid:200019095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.laojhs.top",nocase; classtype:attempted-recon; sid:200019096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.lcq3yk.icu",nocase; classtype:attempted-recon; sid:200019097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ljnqqs.top",nocase; classtype:attempted-recon; sid:200019098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.llpgun.icu",nocase; classtype:attempted-recon; sid:200019099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.luiyci.top",nocase; classtype:attempted-recon; sid:200019100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.lxszsl.icu",nocase; classtype:attempted-recon; sid:200019101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.mleksy.top",nocase; classtype:attempted-recon; sid:200019102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.msiobh.top",nocase; classtype:attempted-recon; sid:200019103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.msphzi.top",nocase; classtype:attempted-recon; sid:200019104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.mtdqmc.icu",nocase; classtype:attempted-recon; sid:200019105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ndkuwx.top",nocase; classtype:attempted-recon; sid:200019106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.neagfg.top",nocase; classtype:attempted-recon; sid:200019107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.njaczc.top",nocase; classtype:attempted-recon; sid:200019108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.obmxjj.top",nocase; classtype:attempted-recon; sid:200019109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ontgpj.top",nocase; classtype:attempted-recon; sid:200019110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.oshfrh.top",nocase; classtype:attempted-recon; sid:200019111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.oubbeh.top",nocase; classtype:attempted-recon; sid:200019112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.oxfasj.top",nocase; classtype:attempted-recon; sid:200019113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.p0mou1.icu",nocase; classtype:attempted-recon; sid:200019114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.p31bj2.icu",nocase; classtype:attempted-recon; sid:200019115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.p7251j.icu",nocase; classtype:attempted-recon; sid:200019116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.passoe.top",nocase; classtype:attempted-recon; sid:200019117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.pasytj.top",nocase; classtype:attempted-recon; sid:200019118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.pazzro.top",nocase; classtype:attempted-recon; sid:200019119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.pcukoi.icu",nocase; classtype:attempted-recon; sid:200019120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.qyaudr.top",nocase; classtype:attempted-recon; sid:200019121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.rlaptr.top",nocase; classtype:attempted-recon; sid:200019122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.rlrkoz.top",nocase; classtype:attempted-recon; sid:200019123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.rwuluo.top",nocase; classtype:attempted-recon; sid:200019124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.sk6y3y.icu",nocase; classtype:attempted-recon; sid:200019125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.slstjk.top",nocase; classtype:attempted-recon; sid:200019126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.tbsfgl.icu",nocase; classtype:attempted-recon; sid:200019127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.timuyw.icu",nocase; classtype:attempted-recon; sid:200019128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.tpwghl.top",nocase; classtype:attempted-recon; sid:200019129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.tutpfb.icu",nocase; classtype:attempted-recon; sid:200019130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.veuqdd.icu",nocase; classtype:attempted-recon; sid:200019131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.vghrha.top",nocase; classtype:attempted-recon; sid:200019132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.vnhemj.icu",nocase; classtype:attempted-recon; sid:200019133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.wfgyvk.top",nocase; classtype:attempted-recon; sid:200019134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.wgrfay.top",nocase; classtype:attempted-recon; sid:200019135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.xahccw.icu",nocase; classtype:attempted-recon; sid:200019136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.xgnrrh.top",nocase; classtype:attempted-recon; sid:200019137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.xqvlbl.top",nocase; classtype:attempted-recon; sid:200019138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ynaecg.top",nocase; classtype:attempted-recon; sid:200019139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ywcuuj.top",nocase; classtype:attempted-recon; sid:200019140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.ywzeqn.top",nocase; classtype:attempted-recon; sid:200019141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.zdealp.icu",nocase; classtype:attempted-recon; sid:200019142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.zllcxx.top",nocase; classtype:attempted-recon; sid:200019143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.zqlmyv.icu",nocase; classtype:attempted-recon; sid:200019144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.zxizqv.top",nocase; classtype:attempted-recon; sid:200019145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.a8m6di.icu",nocase; classtype:attempted-recon; sid:200019146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.aaxbpo.top",nocase; classtype:attempted-recon; sid:200019147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.adpslp.top",nocase; classtype:attempted-recon; sid:200019148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.aenjkw.top",nocase; classtype:attempted-recon; sid:200019149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.agdhkb.top",nocase; classtype:attempted-recon; sid:200019150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.akgjcb.top",nocase; classtype:attempted-recon; sid:200019151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.baelbg.top",nocase; classtype:attempted-recon; sid:200019152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200019153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.bkwgho.top",nocase; classtype:attempted-recon; sid:200019154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.bmknvf.top",nocase; classtype:attempted-recon; sid:200019155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.buzmri.top",nocase; classtype:attempted-recon; sid:200019156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.dgckut.top",nocase; classtype:attempted-recon; sid:200019157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.djtela.top",nocase; classtype:attempted-recon; sid:200019158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.dlhsif.top",nocase; classtype:attempted-recon; sid:200019159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.dnoftm.top",nocase; classtype:attempted-recon; sid:200019160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.doxryd.top",nocase; classtype:attempted-recon; sid:200019161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.dwxrym.top",nocase; classtype:attempted-recon; sid:200019162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.dy1nam.icu",nocase; classtype:attempted-recon; sid:200019163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.efcgly.icu",nocase; classtype:attempted-recon; sid:200019164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ejvyvo.top",nocase; classtype:attempted-recon; sid:200019165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.erkzgb.top",nocase; classtype:attempted-recon; sid:200019166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.erqvhz.icu",nocase; classtype:attempted-recon; sid:200019167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ewhdkk.top",nocase; classtype:attempted-recon; sid:200019168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.flgapj.top",nocase; classtype:attempted-recon; sid:200019169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200019170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.fviult.icu",nocase; classtype:attempted-recon; sid:200019171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.fwgrbb.top",nocase; classtype:attempted-recon; sid:200019172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.fxfbld.top",nocase; classtype:attempted-recon; sid:200019173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.gpik9c.icu",nocase; classtype:attempted-recon; sid:200019174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200019175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.hihmof.top",nocase; classtype:attempted-recon; sid:200019176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200019177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.hstoja.top",nocase; classtype:attempted-recon; sid:200019178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.icbupe.icu",nocase; classtype:attempted-recon; sid:200019179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ikjthi.top",nocase; classtype:attempted-recon; sid:200019180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ileuct.top",nocase; classtype:attempted-recon; sid:200019181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.iobrjq.icu",nocase; classtype:attempted-recon; sid:200019182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.iyfkny.top",nocase; classtype:attempted-recon; sid:200019183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.jashxw.icu",nocase; classtype:attempted-recon; sid:200019184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.jfqejr.icu",nocase; classtype:attempted-recon; sid:200019185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.joziry.top",nocase; classtype:attempted-recon; sid:200019186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.jvquad.top",nocase; classtype:attempted-recon; sid:200019187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.jvzxml.top",nocase; classtype:attempted-recon; sid:200019188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.jyszpt.top",nocase; classtype:attempted-recon; sid:200019189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.kdhnlt.top",nocase; classtype:attempted-recon; sid:200019190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.keud7w.icu",nocase; classtype:attempted-recon; sid:200019191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.kgflqd.top",nocase; classtype:attempted-recon; sid:200019192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.kkvrke.icu",nocase; classtype:attempted-recon; sid:200019193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.kosoht.icu",nocase; classtype:attempted-recon; sid:200019194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.laojhs.top",nocase; classtype:attempted-recon; sid:200019195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.lcq3yk.icu",nocase; classtype:attempted-recon; sid:200019196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ljnqqs.top",nocase; classtype:attempted-recon; sid:200019197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.llpgun.icu",nocase; classtype:attempted-recon; sid:200019198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.luiyci.top",nocase; classtype:attempted-recon; sid:200019199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.lxszsl.icu",nocase; classtype:attempted-recon; sid:200019200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.mleksy.top",nocase; classtype:attempted-recon; sid:200019201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.msiobh.top",nocase; classtype:attempted-recon; sid:200019202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.msphzi.top",nocase; classtype:attempted-recon; sid:200019203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.mtdqmc.icu",nocase; classtype:attempted-recon; sid:200019204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioineeicure.visorcoersnsvxmaenercmsvi.ndkuwx.top",nocase; classtype:attempted-recon; sid:200019205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.a8m6di.icu",nocase; classtype:attempted-recon; sid:200019206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.aaxbpo.top",nocase; classtype:attempted-recon; sid:200019207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.adpslp.top",nocase; classtype:attempted-recon; sid:200019208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.aenjkw.top",nocase; classtype:attempted-recon; sid:200019209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.agdhkb.top",nocase; classtype:attempted-recon; sid:200019210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.akgjcb.top",nocase; classtype:attempted-recon; sid:200019211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.baelbg.top",nocase; classtype:attempted-recon; sid:200019212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200019213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.bkwgho.top",nocase; classtype:attempted-recon; sid:200019214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.bmknvf.top",nocase; classtype:attempted-recon; sid:200019215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.buzmri.top",nocase; classtype:attempted-recon; sid:200019216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.dgckut.top",nocase; classtype:attempted-recon; sid:200019217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.djtela.top",nocase; classtype:attempted-recon; sid:200019218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.dlhsif.top",nocase; classtype:attempted-recon; sid:200019219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.dnoftm.top",nocase; classtype:attempted-recon; sid:200019220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.doxryd.top",nocase; classtype:attempted-recon; sid:200019221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.dwxrym.top",nocase; classtype:attempted-recon; sid:200019222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.dy1nam.icu",nocase; classtype:attempted-recon; sid:200019223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.efcgly.icu",nocase; classtype:attempted-recon; sid:200019224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ejvyvo.top",nocase; classtype:attempted-recon; sid:200019225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.erkzgb.top",nocase; classtype:attempted-recon; sid:200019226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.erqvhz.icu",nocase; classtype:attempted-recon; sid:200019227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ewhdkk.top",nocase; classtype:attempted-recon; sid:200019228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.flgapj.top",nocase; classtype:attempted-recon; sid:200019229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200019230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.fviult.icu",nocase; classtype:attempted-recon; sid:200019231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.fwgrbb.top",nocase; classtype:attempted-recon; sid:200019232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.fxfbld.top",nocase; classtype:attempted-recon; sid:200019233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.gpik9c.icu",nocase; classtype:attempted-recon; sid:200019234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200019235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.hihmof.top",nocase; classtype:attempted-recon; sid:200019236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200019237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.hstoja.top",nocase; classtype:attempted-recon; sid:200019238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.icbupe.icu",nocase; classtype:attempted-recon; sid:200019239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ikjthi.top",nocase; classtype:attempted-recon; sid:200019240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ileuct.top",nocase; classtype:attempted-recon; sid:200019241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.iobrjq.icu",nocase; classtype:attempted-recon; sid:200019242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.iyfkny.top",nocase; classtype:attempted-recon; sid:200019243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.jashxw.icu",nocase; classtype:attempted-recon; sid:200019244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.jfqejr.icu",nocase; classtype:attempted-recon; sid:200019245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.joziry.top",nocase; classtype:attempted-recon; sid:200019246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.jvquad.top",nocase; classtype:attempted-recon; sid:200019247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.jvzxml.top",nocase; classtype:attempted-recon; sid:200019248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.jyszpt.top",nocase; classtype:attempted-recon; sid:200019249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.kdhnlt.top",nocase; classtype:attempted-recon; sid:200019250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.keud7w.icu",nocase; classtype:attempted-recon; sid:200019251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.kgflqd.top",nocase; classtype:attempted-recon; sid:200019252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.kkvrke.icu",nocase; classtype:attempted-recon; sid:200019253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.kosoht.icu",nocase; classtype:attempted-recon; sid:200019254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.laojhs.top",nocase; classtype:attempted-recon; sid:200019255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.lcq3yk.icu",nocase; classtype:attempted-recon; sid:200019256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ljnqqs.top",nocase; classtype:attempted-recon; sid:200019257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.llpgun.icu",nocase; classtype:attempted-recon; sid:200019258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.luiyci.top",nocase; classtype:attempted-recon; sid:200019259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.lxszsl.icu",nocase; classtype:attempted-recon; sid:200019260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.mleksy.top",nocase; classtype:attempted-recon; sid:200019261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.msiobh.top",nocase; classtype:attempted-recon; sid:200019262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.msphzi.top",nocase; classtype:attempted-recon; sid:200019263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.mtdqmc.icu",nocase; classtype:attempted-recon; sid:200019264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ndkuwx.top",nocase; classtype:attempted-recon; sid:200019265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.neagfg.top",nocase; classtype:attempted-recon; sid:200019266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.njaczc.top",nocase; classtype:attempted-recon; sid:200019267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.obmxjj.top",nocase; classtype:attempted-recon; sid:200019268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ontgpj.top",nocase; classtype:attempted-recon; sid:200019269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.oshfrh.top",nocase; classtype:attempted-recon; sid:200019270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.oubbeh.top",nocase; classtype:attempted-recon; sid:200019271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.oxfasj.top",nocase; classtype:attempted-recon; sid:200019272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.p0mou1.icu",nocase; classtype:attempted-recon; sid:200019273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.p31bj2.icu",nocase; classtype:attempted-recon; sid:200019274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.p7251j.icu",nocase; classtype:attempted-recon; sid:200019275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.passoe.top",nocase; classtype:attempted-recon; sid:200019276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.pasytj.top",nocase; classtype:attempted-recon; sid:200019277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.pazzro.top",nocase; classtype:attempted-recon; sid:200019278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.pcukoi.icu",nocase; classtype:attempted-recon; sid:200019279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.qyaudr.top",nocase; classtype:attempted-recon; sid:200019280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.rlaptr.top",nocase; classtype:attempted-recon; sid:200019281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.rlrkoz.top",nocase; classtype:attempted-recon; sid:200019282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.rwuluo.top",nocase; classtype:attempted-recon; sid:200019283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.sk6y3y.icu",nocase; classtype:attempted-recon; sid:200019284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.slstjk.top",nocase; classtype:attempted-recon; sid:200019285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.tbsfgl.icu",nocase; classtype:attempted-recon; sid:200019286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.timuyw.icu",nocase; classtype:attempted-recon; sid:200019287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.tpwghl.top",nocase; classtype:attempted-recon; sid:200019288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.tutpfb.icu",nocase; classtype:attempted-recon; sid:200019289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.veuqdd.icu",nocase; classtype:attempted-recon; sid:200019290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.vghrha.top",nocase; classtype:attempted-recon; sid:200019291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.vnhemj.icu",nocase; classtype:attempted-recon; sid:200019292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.wfgyvk.top",nocase; classtype:attempted-recon; sid:200019293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.wgrfay.top",nocase; classtype:attempted-recon; sid:200019294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.xahccw.icu",nocase; classtype:attempted-recon; sid:200019295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.xgnrrh.top",nocase; classtype:attempted-recon; sid:200019296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.xqvlbl.top",nocase; classtype:attempted-recon; sid:200019297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ynaecg.top",nocase; classtype:attempted-recon; sid:200019298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ywcuuj.top",nocase; classtype:attempted-recon; sid:200019299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.ywzeqn.top",nocase; classtype:attempted-recon; sid:200019300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.zdealp.icu",nocase; classtype:attempted-recon; sid:200019301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.zllcxx.top",nocase; classtype:attempted-recon; sid:200019302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.zqlmyv.icu",nocase; classtype:attempted-recon; sid:200019303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.zxizqv.top",nocase; classtype:attempted-recon; sid:200019304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.a8m6di.icu",nocase; classtype:attempted-recon; sid:200019305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.aaxbpo.top",nocase; classtype:attempted-recon; sid:200019306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.adpslp.top",nocase; classtype:attempted-recon; sid:200019307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.aenjkw.top",nocase; classtype:attempted-recon; sid:200019308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.agdhkb.top",nocase; classtype:attempted-recon; sid:200019309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.akgjcb.top",nocase; classtype:attempted-recon; sid:200019310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.baelbg.top",nocase; classtype:attempted-recon; sid:200019311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200019312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.bkwgho.top",nocase; classtype:attempted-recon; sid:200019313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.bmknvf.top",nocase; classtype:attempted-recon; sid:200019314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.buzmri.top",nocase; classtype:attempted-recon; sid:200019315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.dgckut.top",nocase; classtype:attempted-recon; sid:200019316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.djtela.top",nocase; classtype:attempted-recon; sid:200019317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.dlhsif.top",nocase; classtype:attempted-recon; sid:200019318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.dnoftm.top",nocase; classtype:attempted-recon; sid:200019319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.doxryd.top",nocase; classtype:attempted-recon; sid:200019320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.dwxrym.top",nocase; classtype:attempted-recon; sid:200019321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.dy1nam.icu",nocase; classtype:attempted-recon; sid:200019322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.efcgly.icu",nocase; classtype:attempted-recon; sid:200019323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ejvyvo.top",nocase; classtype:attempted-recon; sid:200019324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.erkzgb.top",nocase; classtype:attempted-recon; sid:200019325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.erqvhz.icu",nocase; classtype:attempted-recon; sid:200019326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ewhdkk.top",nocase; classtype:attempted-recon; sid:200019327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.flgapj.top",nocase; classtype:attempted-recon; sid:200019328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200019329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.fviult.icu",nocase; classtype:attempted-recon; sid:200019330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.fwgrbb.top",nocase; classtype:attempted-recon; sid:200019331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.fxfbld.top",nocase; classtype:attempted-recon; sid:200019332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.gpik9c.icu",nocase; classtype:attempted-recon; sid:200019333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200019334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.hihmof.top",nocase; classtype:attempted-recon; sid:200019335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200019336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.hstoja.top",nocase; classtype:attempted-recon; sid:200019337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.icbupe.icu",nocase; classtype:attempted-recon; sid:200019338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ikjthi.top",nocase; classtype:attempted-recon; sid:200019339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ileuct.top",nocase; classtype:attempted-recon; sid:200019340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.iobrjq.icu",nocase; classtype:attempted-recon; sid:200019341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.iyfkny.top",nocase; classtype:attempted-recon; sid:200019342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.jashxw.icu",nocase; classtype:attempted-recon; sid:200019343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.jfqejr.icu",nocase; classtype:attempted-recon; sid:200019344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.joziry.top",nocase; classtype:attempted-recon; sid:200019345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.jvquad.top",nocase; classtype:attempted-recon; sid:200019346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.jvzxml.top",nocase; classtype:attempted-recon; sid:200019347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.jyszpt.top",nocase; classtype:attempted-recon; sid:200019348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.kdhnlt.top",nocase; classtype:attempted-recon; sid:200019349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.keud7w.icu",nocase; classtype:attempted-recon; sid:200019350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.kgflqd.top",nocase; classtype:attempted-recon; sid:200019351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.kkvrke.icu",nocase; classtype:attempted-recon; sid:200019352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.kosoht.icu",nocase; classtype:attempted-recon; sid:200019353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.laojhs.top",nocase; classtype:attempted-recon; sid:200019354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.lcq3yk.icu",nocase; classtype:attempted-recon; sid:200019355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ljnqqs.top",nocase; classtype:attempted-recon; sid:200019356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.llpgun.icu",nocase; classtype:attempted-recon; sid:200019357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.luiyci.top",nocase; classtype:attempted-recon; sid:200019358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.lxszsl.icu",nocase; classtype:attempted-recon; sid:200019359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.mleksy.top",nocase; classtype:attempted-recon; sid:200019360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.msiobh.top",nocase; classtype:attempted-recon; sid:200019361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.msphzi.top",nocase; classtype:attempted-recon; sid:200019362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.mtdqmc.icu",nocase; classtype:attempted-recon; sid:200019363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ndkuwx.top",nocase; classtype:attempted-recon; sid:200019364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.neagfg.top",nocase; classtype:attempted-recon; sid:200019365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.njaczc.top",nocase; classtype:attempted-recon; sid:200019366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.obmxjj.top",nocase; classtype:attempted-recon; sid:200019367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ontgpj.top",nocase; classtype:attempted-recon; sid:200019368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.oshfrh.top",nocase; classtype:attempted-recon; sid:200019369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.oubbeh.top",nocase; classtype:attempted-recon; sid:200019370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.oxfasj.top",nocase; classtype:attempted-recon; sid:200019371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.p0mou1.icu",nocase; classtype:attempted-recon; sid:200019372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.p31bj2.icu",nocase; classtype:attempted-recon; sid:200019373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.p7251j.icu",nocase; classtype:attempted-recon; sid:200019374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.passoe.top",nocase; classtype:attempted-recon; sid:200019375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.pasytj.top",nocase; classtype:attempted-recon; sid:200019376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.pazzro.top",nocase; classtype:attempted-recon; sid:200019377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.pcukoi.icu",nocase; classtype:attempted-recon; sid:200019378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.qyaudr.top",nocase; classtype:attempted-recon; sid:200019379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.rlaptr.top",nocase; classtype:attempted-recon; sid:200019380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.rlrkoz.top",nocase; classtype:attempted-recon; sid:200019381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.rwuluo.top",nocase; classtype:attempted-recon; sid:200019382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.sk6y3y.icu",nocase; classtype:attempted-recon; sid:200019383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.slstjk.top",nocase; classtype:attempted-recon; sid:200019384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.tbsfgl.icu",nocase; classtype:attempted-recon; sid:200019385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.timuyw.icu",nocase; classtype:attempted-recon; sid:200019386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.tpwghl.top",nocase; classtype:attempted-recon; sid:200019387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.tutpfb.icu",nocase; classtype:attempted-recon; sid:200019388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.veuqdd.icu",nocase; classtype:attempted-recon; sid:200019389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.vghrha.top",nocase; classtype:attempted-recon; sid:200019390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.vnhemj.icu",nocase; classtype:attempted-recon; sid:200019391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.wfgyvk.top",nocase; classtype:attempted-recon; sid:200019392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.wgrfay.top",nocase; classtype:attempted-recon; sid:200019393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.xahccw.icu",nocase; classtype:attempted-recon; sid:200019394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.xgnrrh.top",nocase; classtype:attempted-recon; sid:200019395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.xqvlbl.top",nocase; classtype:attempted-recon; sid:200019396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ynaecg.top",nocase; classtype:attempted-recon; sid:200019397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ywcuuj.top",nocase; classtype:attempted-recon; sid:200019398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.ywzeqn.top",nocase; classtype:attempted-recon; sid:200019399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.zdealp.icu",nocase; classtype:attempted-recon; sid:200019400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.zllcxx.top",nocase; classtype:attempted-recon; sid:200019401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.zqlmyv.icu",nocase; classtype:attempted-recon; sid:200019402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.zxizqv.top",nocase; classtype:attempted-recon; sid:200019403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.a8m6di.icu",nocase; classtype:attempted-recon; sid:200019404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.aaxbpo.top",nocase; classtype:attempted-recon; sid:200019405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.adpslp.top",nocase; classtype:attempted-recon; sid:200019406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.aenjkw.top",nocase; classtype:attempted-recon; sid:200019407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.agdhkb.top",nocase; classtype:attempted-recon; sid:200019408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.akgjcb.top",nocase; classtype:attempted-recon; sid:200019409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.baelbg.top",nocase; classtype:attempted-recon; sid:200019410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200019411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.bkwgho.top",nocase; classtype:attempted-recon; sid:200019412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.bmknvf.top",nocase; classtype:attempted-recon; sid:200019413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.buzmri.top",nocase; classtype:attempted-recon; sid:200019414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.dgckut.top",nocase; classtype:attempted-recon; sid:200019415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.djtela.top",nocase; classtype:attempted-recon; sid:200019416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.dlhsif.top",nocase; classtype:attempted-recon; sid:200019417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.dnoftm.top",nocase; classtype:attempted-recon; sid:200019418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.doxryd.top",nocase; classtype:attempted-recon; sid:200019419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.dwxrym.top",nocase; classtype:attempted-recon; sid:200019420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.dy1nam.icu",nocase; classtype:attempted-recon; sid:200019421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.efcgly.icu",nocase; classtype:attempted-recon; sid:200019422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ejvyvo.top",nocase; classtype:attempted-recon; sid:200019423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.erkzgb.top",nocase; classtype:attempted-recon; sid:200019424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.erqvhz.icu",nocase; classtype:attempted-recon; sid:200019425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ewhdkk.top",nocase; classtype:attempted-recon; sid:200019426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.flgapj.top",nocase; classtype:attempted-recon; sid:200019427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200019428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.fviult.icu",nocase; classtype:attempted-recon; sid:200019429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.fwgrbb.top",nocase; classtype:attempted-recon; sid:200019430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.fxfbld.top",nocase; classtype:attempted-recon; sid:200019431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.gpik9c.icu",nocase; classtype:attempted-recon; sid:200019432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200019433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.hihmof.top",nocase; classtype:attempted-recon; sid:200019434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200019435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.hstoja.top",nocase; classtype:attempted-recon; sid:200019436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.icbupe.icu",nocase; classtype:attempted-recon; sid:200019437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ikjthi.top",nocase; classtype:attempted-recon; sid:200019438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ileuct.top",nocase; classtype:attempted-recon; sid:200019439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.iobrjq.icu",nocase; classtype:attempted-recon; sid:200019440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.iyfkny.top",nocase; classtype:attempted-recon; sid:200019441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.jashxw.icu",nocase; classtype:attempted-recon; sid:200019442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.jfqejr.icu",nocase; classtype:attempted-recon; sid:200019443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.joziry.top",nocase; classtype:attempted-recon; sid:200019444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.jvquad.top",nocase; classtype:attempted-recon; sid:200019445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.jvzxml.top",nocase; classtype:attempted-recon; sid:200019446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.jyszpt.top",nocase; classtype:attempted-recon; sid:200019447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.kdhnlt.top",nocase; classtype:attempted-recon; sid:200019448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.keud7w.icu",nocase; classtype:attempted-recon; sid:200019449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.kgflqd.top",nocase; classtype:attempted-recon; sid:200019450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.kkvrke.icu",nocase; classtype:attempted-recon; sid:200019451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.kosoht.icu",nocase; classtype:attempted-recon; sid:200019452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.laojhs.top",nocase; classtype:attempted-recon; sid:200019453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.lcq3yk.icu",nocase; classtype:attempted-recon; sid:200019454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ljnqqs.top",nocase; classtype:attempted-recon; sid:200019455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.llpgun.icu",nocase; classtype:attempted-recon; sid:200019456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.luiyci.top",nocase; classtype:attempted-recon; sid:200019457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.lxszsl.icu",nocase; classtype:attempted-recon; sid:200019458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.mleksy.top",nocase; classtype:attempted-recon; sid:200019459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.msiobh.top",nocase; classtype:attempted-recon; sid:200019460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.msphzi.top",nocase; classtype:attempted-recon; sid:200019461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.mtdqmc.icu",nocase; classtype:attempted-recon; sid:200019462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ndkuwx.top",nocase; classtype:attempted-recon; sid:200019463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.neagfg.top",nocase; classtype:attempted-recon; sid:200019464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.njaczc.top",nocase; classtype:attempted-recon; sid:200019465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.obmxjj.top",nocase; classtype:attempted-recon; sid:200019466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ontgpj.top",nocase; classtype:attempted-recon; sid:200019467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.oshfrh.top",nocase; classtype:attempted-recon; sid:200019468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.oubbeh.top",nocase; classtype:attempted-recon; sid:200019469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.oxfasj.top",nocase; classtype:attempted-recon; sid:200019470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.p0mou1.icu",nocase; classtype:attempted-recon; sid:200019471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.p31bj2.icu",nocase; classtype:attempted-recon; sid:200019472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.p7251j.icu",nocase; classtype:attempted-recon; sid:200019473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.passoe.top",nocase; classtype:attempted-recon; sid:200019474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.pasytj.top",nocase; classtype:attempted-recon; sid:200019475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.pazzro.top",nocase; classtype:attempted-recon; sid:200019476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.pcukoi.icu",nocase; classtype:attempted-recon; sid:200019477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.qyaudr.top",nocase; classtype:attempted-recon; sid:200019478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.rlaptr.top",nocase; classtype:attempted-recon; sid:200019479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.rlrkoz.top",nocase; classtype:attempted-recon; sid:200019480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.rwuluo.top",nocase; classtype:attempted-recon; sid:200019481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.sk6y3y.icu",nocase; classtype:attempted-recon; sid:200019482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.slstjk.top",nocase; classtype:attempted-recon; sid:200019483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.tbsfgl.icu",nocase; classtype:attempted-recon; sid:200019484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.timuyw.icu",nocase; classtype:attempted-recon; sid:200019485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.tpwghl.top",nocase; classtype:attempted-recon; sid:200019486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.tutpfb.icu",nocase; classtype:attempted-recon; sid:200019487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.veuqdd.icu",nocase; classtype:attempted-recon; sid:200019488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.vghrha.top",nocase; classtype:attempted-recon; sid:200019489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.wfgyvk.top",nocase; classtype:attempted-recon; sid:200019490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.wgrfay.top",nocase; classtype:attempted-recon; sid:200019491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.xahccw.icu",nocase; classtype:attempted-recon; sid:200019492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.xgnrrh.top",nocase; classtype:attempted-recon; sid:200019493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.xqvlbl.top",nocase; classtype:attempted-recon; sid:200019494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ynaecg.top",nocase; classtype:attempted-recon; sid:200019495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ywcuuj.top",nocase; classtype:attempted-recon; sid:200019496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.ywzeqn.top",nocase; classtype:attempted-recon; sid:200019497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.zdealp.icu",nocase; classtype:attempted-recon; sid:200019498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.zllcxx.top",nocase; classtype:attempted-recon; sid:200019499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.zqlmyv.icu",nocase; classtype:attempted-recon; sid:200019500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.zxizqv.top",nocase; classtype:attempted-recon; sid:200019501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.a8m6di.icu",nocase; classtype:attempted-recon; sid:200019502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.aaxbpo.top",nocase; classtype:attempted-recon; sid:200019503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.adpslp.top",nocase; classtype:attempted-recon; sid:200019504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.aenjkw.top",nocase; classtype:attempted-recon; sid:200019505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.agdhkb.top",nocase; classtype:attempted-recon; sid:200019506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.akgjcb.top",nocase; classtype:attempted-recon; sid:200019507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.baelbg.top",nocase; classtype:attempted-recon; sid:200019508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200019509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.bkwgho.top",nocase; classtype:attempted-recon; sid:200019510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.bmknvf.top",nocase; classtype:attempted-recon; sid:200019511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.buzmri.top",nocase; classtype:attempted-recon; sid:200019512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.dgckut.top",nocase; classtype:attempted-recon; sid:200019513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.djtela.top",nocase; classtype:attempted-recon; sid:200019514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.dlhsif.top",nocase; classtype:attempted-recon; sid:200019515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.dnoftm.top",nocase; classtype:attempted-recon; sid:200019516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.doxryd.top",nocase; classtype:attempted-recon; sid:200019517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.dwxrym.top",nocase; classtype:attempted-recon; sid:200019518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.dy1nam.icu",nocase; classtype:attempted-recon; sid:200019519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.efcgly.icu",nocase; classtype:attempted-recon; sid:200019520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ejvyvo.top",nocase; classtype:attempted-recon; sid:200019521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.erkzgb.top",nocase; classtype:attempted-recon; sid:200019522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.erqvhz.icu",nocase; classtype:attempted-recon; sid:200019523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ewhdkk.top",nocase; classtype:attempted-recon; sid:200019524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.flgapj.top",nocase; classtype:attempted-recon; sid:200019525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200019526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.fviult.icu",nocase; classtype:attempted-recon; sid:200019527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.fwgrbb.top",nocase; classtype:attempted-recon; sid:200019528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.fxfbld.top",nocase; classtype:attempted-recon; sid:200019529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.gpik9c.icu",nocase; classtype:attempted-recon; sid:200019530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200019531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.hihmof.top",nocase; classtype:attempted-recon; sid:200019532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200019533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.hstoja.top",nocase; classtype:attempted-recon; sid:200019534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.icbupe.icu",nocase; classtype:attempted-recon; sid:200019535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ikjthi.top",nocase; classtype:attempted-recon; sid:200019536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ileuct.top",nocase; classtype:attempted-recon; sid:200019537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.iobrjq.icu",nocase; classtype:attempted-recon; sid:200019538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.iyfkny.top",nocase; classtype:attempted-recon; sid:200019539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.jashxw.icu",nocase; classtype:attempted-recon; sid:200019540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.jfqejr.icu",nocase; classtype:attempted-recon; sid:200019541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.joziry.top",nocase; classtype:attempted-recon; sid:200019542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.jvquad.top",nocase; classtype:attempted-recon; sid:200019543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.jvzxml.top",nocase; classtype:attempted-recon; sid:200019544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.jyszpt.top",nocase; classtype:attempted-recon; sid:200019545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.kdhnlt.top",nocase; classtype:attempted-recon; sid:200019546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.keud7w.icu",nocase; classtype:attempted-recon; sid:200019547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.kgflqd.top",nocase; classtype:attempted-recon; sid:200019548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.kkvrke.icu",nocase; classtype:attempted-recon; sid:200019549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.kosoht.icu",nocase; classtype:attempted-recon; sid:200019550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.laojhs.top",nocase; classtype:attempted-recon; sid:200019551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.lcq3yk.icu",nocase; classtype:attempted-recon; sid:200019552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ljnqqs.top",nocase; classtype:attempted-recon; sid:200019553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.llpgun.icu",nocase; classtype:attempted-recon; sid:200019554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.luiyci.top",nocase; classtype:attempted-recon; sid:200019555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.lxszsl.icu",nocase; classtype:attempted-recon; sid:200019556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.mleksy.top",nocase; classtype:attempted-recon; sid:200019557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.msiobh.top",nocase; classtype:attempted-recon; sid:200019558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.msphzi.top",nocase; classtype:attempted-recon; sid:200019559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.mtdqmc.icu",nocase; classtype:attempted-recon; sid:200019560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ndkuwx.top",nocase; classtype:attempted-recon; sid:200019561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.neagfg.top",nocase; classtype:attempted-recon; sid:200019562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.njaczc.top",nocase; classtype:attempted-recon; sid:200019563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.obmxjj.top",nocase; classtype:attempted-recon; sid:200019564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ontgpj.top",nocase; classtype:attempted-recon; sid:200019565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.oshfrh.top",nocase; classtype:attempted-recon; sid:200019566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.oubbeh.top",nocase; classtype:attempted-recon; sid:200019567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.oxfasj.top",nocase; classtype:attempted-recon; sid:200019568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.p0mou1.icu",nocase; classtype:attempted-recon; sid:200019569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.p31bj2.icu",nocase; classtype:attempted-recon; sid:200019570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.p7251j.icu",nocase; classtype:attempted-recon; sid:200019571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.passoe.top",nocase; classtype:attempted-recon; sid:200019572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.pasytj.top",nocase; classtype:attempted-recon; sid:200019573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.pazzro.top",nocase; classtype:attempted-recon; sid:200019574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.pcukoi.icu",nocase; classtype:attempted-recon; sid:200019575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.qyaudr.top",nocase; classtype:attempted-recon; sid:200019576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.rlaptr.top",nocase; classtype:attempted-recon; sid:200019577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.rlrkoz.top",nocase; classtype:attempted-recon; sid:200019578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.rwuluo.top",nocase; classtype:attempted-recon; sid:200019579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.sk6y3y.icu",nocase; classtype:attempted-recon; sid:200019580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.slstjk.top",nocase; classtype:attempted-recon; sid:200019581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.tbsfgl.icu",nocase; classtype:attempted-recon; sid:200019582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.timuyw.icu",nocase; classtype:attempted-recon; sid:200019583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.tpwghl.top",nocase; classtype:attempted-recon; sid:200019584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.tutpfb.icu",nocase; classtype:attempted-recon; sid:200019585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.veuqdd.icu",nocase; classtype:attempted-recon; sid:200019586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.vghrha.top",nocase; classtype:attempted-recon; sid:200019587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.vnhemj.icu",nocase; classtype:attempted-recon; sid:200019588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.wfgyvk.top",nocase; classtype:attempted-recon; sid:200019589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.wgrfay.top",nocase; classtype:attempted-recon; sid:200019590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.xahccw.icu",nocase; classtype:attempted-recon; sid:200019591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.xgnrrh.top",nocase; classtype:attempted-recon; sid:200019592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.xqvlbl.top",nocase; classtype:attempted-recon; sid:200019593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ynaecg.top",nocase; classtype:attempted-recon; sid:200019594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ywcuuj.top",nocase; classtype:attempted-recon; sid:200019595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.ywzeqn.top",nocase; classtype:attempted-recon; sid:200019596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.zdealp.icu",nocase; classtype:attempted-recon; sid:200019597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.zllcxx.top",nocase; classtype:attempted-recon; sid:200019598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.zqlmyv.icu",nocase; classtype:attempted-recon; sid:200019599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.zxizqv.top",nocase; classtype:attempted-recon; sid:200019600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.a8m6di.icu",nocase; classtype:attempted-recon; sid:200019601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.aaxbpo.top",nocase; classtype:attempted-recon; sid:200019602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.adpslp.top",nocase; classtype:attempted-recon; sid:200019603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.aenjkw.top",nocase; classtype:attempted-recon; sid:200019604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.agdhkb.top",nocase; classtype:attempted-recon; sid:200019605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.akgjcb.top",nocase; classtype:attempted-recon; sid:200019606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.baelbg.top",nocase; classtype:attempted-recon; sid:200019607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200019608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.bkwgho.top",nocase; classtype:attempted-recon; sid:200019609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.bmknvf.top",nocase; classtype:attempted-recon; sid:200019610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.buzmri.top",nocase; classtype:attempted-recon; sid:200019611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.dgckut.top",nocase; classtype:attempted-recon; sid:200019612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.djtela.top",nocase; classtype:attempted-recon; sid:200019613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.dlhsif.top",nocase; classtype:attempted-recon; sid:200019614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.dnoftm.top",nocase; classtype:attempted-recon; sid:200019615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.doxryd.top",nocase; classtype:attempted-recon; sid:200019616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.dwxrym.top",nocase; classtype:attempted-recon; sid:200019617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.dy1nam.icu",nocase; classtype:attempted-recon; sid:200019618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.efcgly.icu",nocase; classtype:attempted-recon; sid:200019619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ejvyvo.top",nocase; classtype:attempted-recon; sid:200019620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.erkzgb.top",nocase; classtype:attempted-recon; sid:200019621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.erqvhz.icu",nocase; classtype:attempted-recon; sid:200019622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ewhdkk.top",nocase; classtype:attempted-recon; sid:200019623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.flgapj.top",nocase; classtype:attempted-recon; sid:200019624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200019625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.fviult.icu",nocase; classtype:attempted-recon; sid:200019626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.fwgrbb.top",nocase; classtype:attempted-recon; sid:200019627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.fxfbld.top",nocase; classtype:attempted-recon; sid:200019628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.gpik9c.icu",nocase; classtype:attempted-recon; sid:200019629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200019630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.hihmof.top",nocase; classtype:attempted-recon; sid:200019631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200019632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.hstoja.top",nocase; classtype:attempted-recon; sid:200019633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.icbupe.icu",nocase; classtype:attempted-recon; sid:200019634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ikjthi.top",nocase; classtype:attempted-recon; sid:200019635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ileuct.top",nocase; classtype:attempted-recon; sid:200019636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.iobrjq.icu",nocase; classtype:attempted-recon; sid:200019637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.iyfkny.top",nocase; classtype:attempted-recon; sid:200019638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.jashxw.icu",nocase; classtype:attempted-recon; sid:200019639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.jfqejr.icu",nocase; classtype:attempted-recon; sid:200019640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.joziry.top",nocase; classtype:attempted-recon; sid:200019641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.jvquad.top",nocase; classtype:attempted-recon; sid:200019642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.jvzxml.top",nocase; classtype:attempted-recon; sid:200019643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.jyszpt.top",nocase; classtype:attempted-recon; sid:200019644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.kdhnlt.top",nocase; classtype:attempted-recon; sid:200019645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.keud7w.icu",nocase; classtype:attempted-recon; sid:200019646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.kgflqd.top",nocase; classtype:attempted-recon; sid:200019647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.kkvrke.icu",nocase; classtype:attempted-recon; sid:200019648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.kosoht.icu",nocase; classtype:attempted-recon; sid:200019649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.laojhs.top",nocase; classtype:attempted-recon; sid:200019650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.lcq3yk.icu",nocase; classtype:attempted-recon; sid:200019651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ljnqqs.top",nocase; classtype:attempted-recon; sid:200019652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.llpgun.icu",nocase; classtype:attempted-recon; sid:200019653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.luiyci.top",nocase; classtype:attempted-recon; sid:200019654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.lxszsl.icu",nocase; classtype:attempted-recon; sid:200019655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.mleksy.top",nocase; classtype:attempted-recon; sid:200019656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.msiobh.top",nocase; classtype:attempted-recon; sid:200019657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.msphzi.top",nocase; classtype:attempted-recon; sid:200019658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.mtdqmc.icu",nocase; classtype:attempted-recon; sid:200019659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ndkuwx.top",nocase; classtype:attempted-recon; sid:200019660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.neagfg.top",nocase; classtype:attempted-recon; sid:200019661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.njaczc.top",nocase; classtype:attempted-recon; sid:200019662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.obmxjj.top",nocase; classtype:attempted-recon; sid:200019663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ontgpj.top",nocase; classtype:attempted-recon; sid:200019664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.oubbeh.top",nocase; classtype:attempted-recon; sid:200019665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.oxfasj.top",nocase; classtype:attempted-recon; sid:200019666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.p0mou1.icu",nocase; classtype:attempted-recon; sid:200019667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.p31bj2.icu",nocase; classtype:attempted-recon; sid:200019668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.p7251j.icu",nocase; classtype:attempted-recon; sid:200019669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.passoe.top",nocase; classtype:attempted-recon; sid:200019670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.pasytj.top",nocase; classtype:attempted-recon; sid:200019671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.pazzro.top",nocase; classtype:attempted-recon; sid:200019672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.pcukoi.icu",nocase; classtype:attempted-recon; sid:200019673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.qyaudr.top",nocase; classtype:attempted-recon; sid:200019674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.rlaptr.top",nocase; classtype:attempted-recon; sid:200019675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.rlrkoz.top",nocase; classtype:attempted-recon; sid:200019676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.rwuluo.top",nocase; classtype:attempted-recon; sid:200019677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.sk6y3y.icu",nocase; classtype:attempted-recon; sid:200019678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.slstjk.top",nocase; classtype:attempted-recon; sid:200019679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.tbsfgl.icu",nocase; classtype:attempted-recon; sid:200019680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.timuyw.icu",nocase; classtype:attempted-recon; sid:200019681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.tpwghl.top",nocase; classtype:attempted-recon; sid:200019682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.tutpfb.icu",nocase; classtype:attempted-recon; sid:200019683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.veuqdd.icu",nocase; classtype:attempted-recon; sid:200019684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.vghrha.top",nocase; classtype:attempted-recon; sid:200019685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.vnhemj.icu",nocase; classtype:attempted-recon; sid:200019686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.wfgyvk.top",nocase; classtype:attempted-recon; sid:200019687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.wgrfay.top",nocase; classtype:attempted-recon; sid:200019688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.xahccw.icu",nocase; classtype:attempted-recon; sid:200019689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.xgnrrh.top",nocase; classtype:attempted-recon; sid:200019690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.xqvlbl.top",nocase; classtype:attempted-recon; sid:200019691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ynaecg.top",nocase; classtype:attempted-recon; sid:200019692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ywcuuj.top",nocase; classtype:attempted-recon; sid:200019693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.ywzeqn.top",nocase; classtype:attempted-recon; sid:200019694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.zdealp.icu",nocase; classtype:attempted-recon; sid:200019695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.zllcxx.top",nocase; classtype:attempted-recon; sid:200019696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.zqlmyv.icu",nocase; classtype:attempted-recon; sid:200019697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.zxizqv.top",nocase; classtype:attempted-recon; sid:200019698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.a8m6di.icu",nocase; classtype:attempted-recon; sid:200019699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.aaxbpo.top",nocase; classtype:attempted-recon; sid:200019700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.adpslp.top",nocase; classtype:attempted-recon; sid:200019701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.aenjkw.top",nocase; classtype:attempted-recon; sid:200019702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.agdhkb.top",nocase; classtype:attempted-recon; sid:200019703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.akgjcb.top",nocase; classtype:attempted-recon; sid:200019704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.baelbg.top",nocase; classtype:attempted-recon; sid:200019705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200019706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.bkwgho.top",nocase; classtype:attempted-recon; sid:200019707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.bmknvf.top",nocase; classtype:attempted-recon; sid:200019708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.buzmri.top",nocase; classtype:attempted-recon; sid:200019709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.dgckut.top",nocase; classtype:attempted-recon; sid:200019710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.djtela.top",nocase; classtype:attempted-recon; sid:200019711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.dlhsif.top",nocase; classtype:attempted-recon; sid:200019712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.dnoftm.top",nocase; classtype:attempted-recon; sid:200019713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.doxryd.top",nocase; classtype:attempted-recon; sid:200019714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.dwxrym.top",nocase; classtype:attempted-recon; sid:200019715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.dy1nam.icu",nocase; classtype:attempted-recon; sid:200019716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.efcgly.icu",nocase; classtype:attempted-recon; sid:200019717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ejvyvo.top",nocase; classtype:attempted-recon; sid:200019718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.erkzgb.top",nocase; classtype:attempted-recon; sid:200019719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.erqvhz.icu",nocase; classtype:attempted-recon; sid:200019720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ewhdkk.top",nocase; classtype:attempted-recon; sid:200019721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.flgapj.top",nocase; classtype:attempted-recon; sid:200019722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200019723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.fviult.icu",nocase; classtype:attempted-recon; sid:200019724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.fwgrbb.top",nocase; classtype:attempted-recon; sid:200019725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.fxfbld.top",nocase; classtype:attempted-recon; sid:200019726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.gpik9c.icu",nocase; classtype:attempted-recon; sid:200019727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200019728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.hihmof.top",nocase; classtype:attempted-recon; sid:200019729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200019730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.icbupe.icu",nocase; classtype:attempted-recon; sid:200019731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ikjthi.top",nocase; classtype:attempted-recon; sid:200019732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ileuct.top",nocase; classtype:attempted-recon; sid:200019733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.iobrjq.icu",nocase; classtype:attempted-recon; sid:200019734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.iyfkny.top",nocase; classtype:attempted-recon; sid:200019735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.jashxw.icu",nocase; classtype:attempted-recon; sid:200019736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.jfqejr.icu",nocase; classtype:attempted-recon; sid:200019737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.joziry.top",nocase; classtype:attempted-recon; sid:200019738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.jvquad.top",nocase; classtype:attempted-recon; sid:200019739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.jvzxml.top",nocase; classtype:attempted-recon; sid:200019740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.jyszpt.top",nocase; classtype:attempted-recon; sid:200019741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.kdhnlt.top",nocase; classtype:attempted-recon; sid:200019742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.keud7w.icu",nocase; classtype:attempted-recon; sid:200019743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.kgflqd.top",nocase; classtype:attempted-recon; sid:200019744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.kkvrke.icu",nocase; classtype:attempted-recon; sid:200019745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.kosoht.icu",nocase; classtype:attempted-recon; sid:200019746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.laojhs.top",nocase; classtype:attempted-recon; sid:200019747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.lcq3yk.icu",nocase; classtype:attempted-recon; sid:200019748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ljnqqs.top",nocase; classtype:attempted-recon; sid:200019749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.llpgun.icu",nocase; classtype:attempted-recon; sid:200019750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.luiyci.top",nocase; classtype:attempted-recon; sid:200019751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.lxszsl.icu",nocase; classtype:attempted-recon; sid:200019752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.mleksy.top",nocase; classtype:attempted-recon; sid:200019753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.msiobh.top",nocase; classtype:attempted-recon; sid:200019754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.msphzi.top",nocase; classtype:attempted-recon; sid:200019755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.mtdqmc.icu",nocase; classtype:attempted-recon; sid:200019756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ndkuwx.top",nocase; classtype:attempted-recon; sid:200019757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.neagfg.top",nocase; classtype:attempted-recon; sid:200019758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.njaczc.top",nocase; classtype:attempted-recon; sid:200019759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.obmxjj.top",nocase; classtype:attempted-recon; sid:200019760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ontgpj.top",nocase; classtype:attempted-recon; sid:200019761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.oshfrh.top",nocase; classtype:attempted-recon; sid:200019762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.oubbeh.top",nocase; classtype:attempted-recon; sid:200019763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.oxfasj.top",nocase; classtype:attempted-recon; sid:200019764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.p0mou1.icu",nocase; classtype:attempted-recon; sid:200019765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.p31bj2.icu",nocase; classtype:attempted-recon; sid:200019766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.p7251j.icu",nocase; classtype:attempted-recon; sid:200019767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.passoe.top",nocase; classtype:attempted-recon; sid:200019768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.pasytj.top",nocase; classtype:attempted-recon; sid:200019769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.pazzro.top",nocase; classtype:attempted-recon; sid:200019770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.pcukoi.icu",nocase; classtype:attempted-recon; sid:200019771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.qyaudr.top",nocase; classtype:attempted-recon; sid:200019772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.rlaptr.top",nocase; classtype:attempted-recon; sid:200019773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.rlrkoz.top",nocase; classtype:attempted-recon; sid:200019774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.rwuluo.top",nocase; classtype:attempted-recon; sid:200019775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.sk6y3y.icu",nocase; classtype:attempted-recon; sid:200019776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.slstjk.top",nocase; classtype:attempted-recon; sid:200019777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.tbsfgl.icu",nocase; classtype:attempted-recon; sid:200019778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.timuyw.icu",nocase; classtype:attempted-recon; sid:200019779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.tpwghl.top",nocase; classtype:attempted-recon; sid:200019780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.tutpfb.icu",nocase; classtype:attempted-recon; sid:200019781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.veuqdd.icu",nocase; classtype:attempted-recon; sid:200019782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.vghrha.top",nocase; classtype:attempted-recon; sid:200019783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.vnhemj.icu",nocase; classtype:attempted-recon; sid:200019784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.wfgyvk.top",nocase; classtype:attempted-recon; sid:200019785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.wgrfay.top",nocase; classtype:attempted-recon; sid:200019786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.xahccw.icu",nocase; classtype:attempted-recon; sid:200019787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.xgnrrh.top",nocase; classtype:attempted-recon; sid:200019788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.xqvlbl.top",nocase; classtype:attempted-recon; sid:200019789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ynaecg.top",nocase; classtype:attempted-recon; sid:200019790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ywcuuj.top",nocase; classtype:attempted-recon; sid:200019791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.ywzeqn.top",nocase; classtype:attempted-recon; sid:200019792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.zdealp.icu",nocase; classtype:attempted-recon; sid:200019793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.zllcxx.top",nocase; classtype:attempted-recon; sid:200019794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.zqlmyv.icu",nocase; classtype:attempted-recon; sid:200019795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.zxizqv.top",nocase; classtype:attempted-recon; sid:200019796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.a8m6di.icu",nocase; classtype:attempted-recon; sid:200019797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.aaxbpo.top",nocase; classtype:attempted-recon; sid:200019798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.adpslp.top",nocase; classtype:attempted-recon; sid:200019799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.aenjkw.top",nocase; classtype:attempted-recon; sid:200019800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.agdhkb.top",nocase; classtype:attempted-recon; sid:200019801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.akgjcb.top",nocase; classtype:attempted-recon; sid:200019802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.baelbg.top",nocase; classtype:attempted-recon; sid:200019803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200019804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.bkwgho.top",nocase; classtype:attempted-recon; sid:200019805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.bmknvf.top",nocase; classtype:attempted-recon; sid:200019806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.buzmri.top",nocase; classtype:attempted-recon; sid:200019807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.dgckut.top",nocase; classtype:attempted-recon; sid:200019808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.djtela.top",nocase; classtype:attempted-recon; sid:200019809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.dlhsif.top",nocase; classtype:attempted-recon; sid:200019810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.dnoftm.top",nocase; classtype:attempted-recon; sid:200019811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.doxryd.top",nocase; classtype:attempted-recon; sid:200019812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.dwxrym.top",nocase; classtype:attempted-recon; sid:200019813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.dy1nam.icu",nocase; classtype:attempted-recon; sid:200019814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.efcgly.icu",nocase; classtype:attempted-recon; sid:200019815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.ejvyvo.top",nocase; classtype:attempted-recon; sid:200019816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.erkzgb.top",nocase; classtype:attempted-recon; sid:200019817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.erqvhz.icu",nocase; classtype:attempted-recon; sid:200019818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.ewhdkk.top",nocase; classtype:attempted-recon; sid:200019819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.flgapj.top",nocase; classtype:attempted-recon; sid:200019820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200019821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.fviult.icu",nocase; classtype:attempted-recon; sid:200019822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.fwgrbb.top",nocase; classtype:attempted-recon; sid:200019823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.fxfbld.top",nocase; classtype:attempted-recon; sid:200019824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.gpik9c.icu",nocase; classtype:attempted-recon; sid:200019825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200019826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.hihmof.top",nocase; classtype:attempted-recon; sid:200019827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200019828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.hstoja.top",nocase; classtype:attempted-recon; sid:200019829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.icbupe.icu",nocase; classtype:attempted-recon; sid:200019830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.ikjthi.top",nocase; classtype:attempted-recon; sid:200019831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.ileuct.top",nocase; classtype:attempted-recon; sid:200019832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.iobrjq.icu",nocase; classtype:attempted-recon; sid:200019833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.iyfkny.top",nocase; classtype:attempted-recon; sid:200019834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.jashxw.icu",nocase; classtype:attempted-recon; sid:200019835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.jfqejr.icu",nocase; classtype:attempted-recon; sid:200019836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.joziry.top",nocase; classtype:attempted-recon; sid:200019837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.jvquad.top",nocase; classtype:attempted-recon; sid:200019838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.jvzxml.top",nocase; classtype:attempted-recon; sid:200019839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.jyszpt.top",nocase; classtype:attempted-recon; sid:200019840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.kdhnlt.top",nocase; classtype:attempted-recon; sid:200019841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.keud7w.icu",nocase; classtype:attempted-recon; sid:200019842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.kgflqd.top",nocase; classtype:attempted-recon; sid:200019843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.kkvrke.icu",nocase; classtype:attempted-recon; sid:200019844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.kosoht.icu",nocase; classtype:attempted-recon; sid:200019845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.laojhs.top",nocase; classtype:attempted-recon; sid:200019846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.lcq3yk.icu",nocase; classtype:attempted-recon; sid:200019847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.ljnqqs.top",nocase; classtype:attempted-recon; sid:200019848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.llpgun.icu",nocase; classtype:attempted-recon; sid:200019849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.luiyci.top",nocase; classtype:attempted-recon; sid:200019850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.lxszsl.icu",nocase; classtype:attempted-recon; sid:200019851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.mleksy.top",nocase; classtype:attempted-recon; sid:200019852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.msiobh.top",nocase; classtype:attempted-recon; sid:200019853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.msphzi.top",nocase; classtype:attempted-recon; sid:200019854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.mtdqmc.icu",nocase; classtype:attempted-recon; sid:200019855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.ndkuwx.top",nocase; classtype:attempted-recon; sid:200019856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.neagfg.top",nocase; classtype:attempted-recon; sid:200019857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.njaczc.top",nocase; classtype:attempted-recon; sid:200019858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.obmxjj.top",nocase; classtype:attempted-recon; sid:200019859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.ontgpj.top",nocase; classtype:attempted-recon; sid:200019860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.oshfrh.top",nocase; classtype:attempted-recon; sid:200019861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.oubbeh.top",nocase; classtype:attempted-recon; sid:200019862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.oxfasj.top",nocase; classtype:attempted-recon; sid:200019863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.p0mou1.icu",nocase; classtype:attempted-recon; sid:200019864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.p31bj2.icu",nocase; classtype:attempted-recon; sid:200019865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.p7251j.icu",nocase; classtype:attempted-recon; sid:200019866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.passoe.top",nocase; classtype:attempted-recon; sid:200019867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.pasytj.top",nocase; classtype:attempted-recon; sid:200019868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.pazzro.top",nocase; classtype:attempted-recon; sid:200019869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.pcukoi.icu",nocase; classtype:attempted-recon; sid:200019870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.qyaudr.top",nocase; classtype:attempted-recon; sid:200019871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.rlaptr.top",nocase; classtype:attempted-recon; sid:200019872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.rlrkoz.top",nocase; classtype:attempted-recon; sid:200019873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.rwuluo.top",nocase; classtype:attempted-recon; sid:200019874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.sk6y3y.icu",nocase; classtype:attempted-recon; sid:200019875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.slstjk.top",nocase; classtype:attempted-recon; sid:200019876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.tbsfgl.icu",nocase; classtype:attempted-recon; sid:200019877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.timuyw.icu",nocase; classtype:attempted-recon; sid:200019878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.tpwghl.top",nocase; classtype:attempted-recon; sid:200019879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.tutpfb.icu",nocase; classtype:attempted-recon; sid:200019880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.veuqdd.icu",nocase; classtype:attempted-recon; sid:200019881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.vghrha.top",nocase; classtype:attempted-recon; sid:200019882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.vnhemj.icu",nocase; classtype:attempted-recon; sid:200019883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.wfgyvk.top",nocase; classtype:attempted-recon; sid:200019884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.wgrfay.top",nocase; classtype:attempted-recon; sid:200019885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.xahccw.icu",nocase; classtype:attempted-recon; sid:200019886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.xgnrrh.top",nocase; classtype:attempted-recon; sid:200019887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.xqvlbl.top",nocase; classtype:attempted-recon; sid:200019888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.ynaecg.top",nocase; classtype:attempted-recon; sid:200019889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.ywcuuj.top",nocase; classtype:attempted-recon; sid:200019890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.ywzeqn.top",nocase; classtype:attempted-recon; sid:200019891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.zdealp.icu",nocase; classtype:attempted-recon; sid:200019892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.zllcxx.top",nocase; classtype:attempted-recon; sid:200019893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.zqlmyv.icu",nocase; classtype:attempted-recon; sid:200019894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.zxizqv.top",nocase; classtype:attempted-recon; sid:200019895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.a8m6di.icu",nocase; classtype:attempted-recon; sid:200019896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.aaxbpo.top",nocase; classtype:attempted-recon; sid:200019897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.adpslp.top",nocase; classtype:attempted-recon; sid:200019898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.aenjkw.top",nocase; classtype:attempted-recon; sid:200019899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.agdhkb.top",nocase; classtype:attempted-recon; sid:200019900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.akgjcb.top",nocase; classtype:attempted-recon; sid:200019901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.baelbg.top",nocase; classtype:attempted-recon; sid:200019902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200019903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.bkwgho.top",nocase; classtype:attempted-recon; sid:200019904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.bmknvf.top",nocase; classtype:attempted-recon; sid:200019905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.buzmri.top",nocase; classtype:attempted-recon; sid:200019906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.dgckut.top",nocase; classtype:attempted-recon; sid:200019907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.djtela.top",nocase; classtype:attempted-recon; sid:200019908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.dlhsif.top",nocase; classtype:attempted-recon; sid:200019909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.dnoftm.top",nocase; classtype:attempted-recon; sid:200019910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.doxryd.top",nocase; classtype:attempted-recon; sid:200019911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.dwxrym.top",nocase; classtype:attempted-recon; sid:200019912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.dy1nam.icu",nocase; classtype:attempted-recon; sid:200019913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.efcgly.icu",nocase; classtype:attempted-recon; sid:200019914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ejvyvo.top",nocase; classtype:attempted-recon; sid:200019915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.erkzgb.top",nocase; classtype:attempted-recon; sid:200019916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.erqvhz.icu",nocase; classtype:attempted-recon; sid:200019917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ewhdkk.top",nocase; classtype:attempted-recon; sid:200019918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.flgapj.top",nocase; classtype:attempted-recon; sid:200019919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200019920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.fviult.icu",nocase; classtype:attempted-recon; sid:200019921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.fwgrbb.top",nocase; classtype:attempted-recon; sid:200019922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.fxfbld.top",nocase; classtype:attempted-recon; sid:200019923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.gpik9c.icu",nocase; classtype:attempted-recon; sid:200019924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200019925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.hihmof.top",nocase; classtype:attempted-recon; sid:200019926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200019927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.hstoja.top",nocase; classtype:attempted-recon; sid:200019928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.icbupe.icu",nocase; classtype:attempted-recon; sid:200019929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ikjthi.top",nocase; classtype:attempted-recon; sid:200019930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ileuct.top",nocase; classtype:attempted-recon; sid:200019931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.iobrjq.icu",nocase; classtype:attempted-recon; sid:200019932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.iyfkny.top",nocase; classtype:attempted-recon; sid:200019933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.jashxw.icu",nocase; classtype:attempted-recon; sid:200019934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.jfqejr.icu",nocase; classtype:attempted-recon; sid:200019935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.joziry.top",nocase; classtype:attempted-recon; sid:200019936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.jvquad.top",nocase; classtype:attempted-recon; sid:200019937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.jvzxml.top",nocase; classtype:attempted-recon; sid:200019938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.jyszpt.top",nocase; classtype:attempted-recon; sid:200019939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.kdhnlt.top",nocase; classtype:attempted-recon; sid:200019940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.keud7w.icu",nocase; classtype:attempted-recon; sid:200019941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.kgflqd.top",nocase; classtype:attempted-recon; sid:200019942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.kkvrke.icu",nocase; classtype:attempted-recon; sid:200019943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.kosoht.icu",nocase; classtype:attempted-recon; sid:200019944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.laojhs.top",nocase; classtype:attempted-recon; sid:200019945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.lcq3yk.icu",nocase; classtype:attempted-recon; sid:200019946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ljnqqs.top",nocase; classtype:attempted-recon; sid:200019947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.llpgun.icu",nocase; classtype:attempted-recon; sid:200019948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.luiyci.top",nocase; classtype:attempted-recon; sid:200019949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.lxszsl.icu",nocase; classtype:attempted-recon; sid:200019950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.mleksy.top",nocase; classtype:attempted-recon; sid:200019951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.msiobh.top",nocase; classtype:attempted-recon; sid:200019952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.msphzi.top",nocase; classtype:attempted-recon; sid:200019953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.mtdqmc.icu",nocase; classtype:attempted-recon; sid:200019954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ndkuwx.top",nocase; classtype:attempted-recon; sid:200019955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.neagfg.top",nocase; classtype:attempted-recon; sid:200019956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.njaczc.top",nocase; classtype:attempted-recon; sid:200019957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.obmxjj.top",nocase; classtype:attempted-recon; sid:200019958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ontgpj.top",nocase; classtype:attempted-recon; sid:200019959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.oshfrh.top",nocase; classtype:attempted-recon; sid:200019960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.oubbeh.top",nocase; classtype:attempted-recon; sid:200019961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.oxfasj.top",nocase; classtype:attempted-recon; sid:200019962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.p0mou1.icu",nocase; classtype:attempted-recon; sid:200019963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.p31bj2.icu",nocase; classtype:attempted-recon; sid:200019964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.p7251j.icu",nocase; classtype:attempted-recon; sid:200019965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.passoe.top",nocase; classtype:attempted-recon; sid:200019966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.pasytj.top",nocase; classtype:attempted-recon; sid:200019967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.pazzro.top",nocase; classtype:attempted-recon; sid:200019968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.pcukoi.icu",nocase; classtype:attempted-recon; sid:200019969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.qyaudr.top",nocase; classtype:attempted-recon; sid:200019970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.rlaptr.top",nocase; classtype:attempted-recon; sid:200019971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.rlrkoz.top",nocase; classtype:attempted-recon; sid:200019972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.rwuluo.top",nocase; classtype:attempted-recon; sid:200019973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.sk6y3y.icu",nocase; classtype:attempted-recon; sid:200019974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.slstjk.top",nocase; classtype:attempted-recon; sid:200019975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.tbsfgl.icu",nocase; classtype:attempted-recon; sid:200019976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.timuyw.icu",nocase; classtype:attempted-recon; sid:200019977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.tpwghl.top",nocase; classtype:attempted-recon; sid:200019978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.tutpfb.icu",nocase; classtype:attempted-recon; sid:200019979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.veuqdd.icu",nocase; classtype:attempted-recon; sid:200019980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.vghrha.top",nocase; classtype:attempted-recon; sid:200019981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.vnhemj.icu",nocase; classtype:attempted-recon; sid:200019982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.wfgyvk.top",nocase; classtype:attempted-recon; sid:200019983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.wgrfay.top",nocase; classtype:attempted-recon; sid:200019984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.xahccw.icu",nocase; classtype:attempted-recon; sid:200019985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.xgnrrh.top",nocase; classtype:attempted-recon; sid:200019986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.xqvlbl.top",nocase; classtype:attempted-recon; sid:200019987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ynaecg.top",nocase; classtype:attempted-recon; sid:200019988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ywcuuj.top",nocase; classtype:attempted-recon; sid:200019989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.ywzeqn.top",nocase; classtype:attempted-recon; sid:200019990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.zdealp.icu",nocase; classtype:attempted-recon; sid:200019991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.zllcxx.top",nocase; classtype:attempted-recon; sid:200019992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.zqlmyv.icu",nocase; classtype:attempted-recon; sid:200019993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.zxizqv.top",nocase; classtype:attempted-recon; sid:200019994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.a8m6di.icu",nocase; classtype:attempted-recon; sid:200019995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.aaxbpo.top",nocase; classtype:attempted-recon; sid:200019996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.adpslp.top",nocase; classtype:attempted-recon; sid:200019997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.aenjkw.top",nocase; classtype:attempted-recon; sid:200019998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.agdhkb.top",nocase; classtype:attempted-recon; sid:200019999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.akgjcb.top",nocase; classtype:attempted-recon; sid:200020000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.baelbg.top",nocase; classtype:attempted-recon; sid:200020001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200020002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.bkwgho.top",nocase; classtype:attempted-recon; sid:200020003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.bmknvf.top",nocase; classtype:attempted-recon; sid:200020004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.buzmri.top",nocase; classtype:attempted-recon; sid:200020005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.dgckut.top",nocase; classtype:attempted-recon; sid:200020006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.djtela.top",nocase; classtype:attempted-recon; sid:200020007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.dlhsif.top",nocase; classtype:attempted-recon; sid:200020008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.dnoftm.top",nocase; classtype:attempted-recon; sid:200020009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.doxryd.top",nocase; classtype:attempted-recon; sid:200020010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.dwxrym.top",nocase; classtype:attempted-recon; sid:200020011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.dy1nam.icu",nocase; classtype:attempted-recon; sid:200020012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.efcgly.icu",nocase; classtype:attempted-recon; sid:200020013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ejvyvo.top",nocase; classtype:attempted-recon; sid:200020014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.erkzgb.top",nocase; classtype:attempted-recon; sid:200020015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.erqvhz.icu",nocase; classtype:attempted-recon; sid:200020016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ewhdkk.top",nocase; classtype:attempted-recon; sid:200020017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.flgapj.top",nocase; classtype:attempted-recon; sid:200020018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200020019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.fviult.icu",nocase; classtype:attempted-recon; sid:200020020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.fwgrbb.top",nocase; classtype:attempted-recon; sid:200020021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.fxfbld.top",nocase; classtype:attempted-recon; sid:200020022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.gpik9c.icu",nocase; classtype:attempted-recon; sid:200020023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200020024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.hihmof.top",nocase; classtype:attempted-recon; sid:200020025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200020026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.hstoja.top",nocase; classtype:attempted-recon; sid:200020027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.icbupe.icu",nocase; classtype:attempted-recon; sid:200020028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ikjthi.top",nocase; classtype:attempted-recon; sid:200020029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ileuct.top",nocase; classtype:attempted-recon; sid:200020030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.iobrjq.icu",nocase; classtype:attempted-recon; sid:200020031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.iyfkny.top",nocase; classtype:attempted-recon; sid:200020032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.jashxw.icu",nocase; classtype:attempted-recon; sid:200020033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.jfqejr.icu",nocase; classtype:attempted-recon; sid:200020034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.joziry.top",nocase; classtype:attempted-recon; sid:200020035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.jvquad.top",nocase; classtype:attempted-recon; sid:200020036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.jvzxml.top",nocase; classtype:attempted-recon; sid:200020037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.jyszpt.top",nocase; classtype:attempted-recon; sid:200020038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.kdhnlt.top",nocase; classtype:attempted-recon; sid:200020039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.keud7w.icu",nocase; classtype:attempted-recon; sid:200020040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.kgflqd.top",nocase; classtype:attempted-recon; sid:200020041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.kkvrke.icu",nocase; classtype:attempted-recon; sid:200020042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.kosoht.icu",nocase; classtype:attempted-recon; sid:200020043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.laojhs.top",nocase; classtype:attempted-recon; sid:200020044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.lcq3yk.icu",nocase; classtype:attempted-recon; sid:200020045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ljnqqs.top",nocase; classtype:attempted-recon; sid:200020046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.llpgun.icu",nocase; classtype:attempted-recon; sid:200020047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.luiyci.top",nocase; classtype:attempted-recon; sid:200020048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.lxszsl.icu",nocase; classtype:attempted-recon; sid:200020049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.mleksy.top",nocase; classtype:attempted-recon; sid:200020050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.msiobh.top",nocase; classtype:attempted-recon; sid:200020051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.msphzi.top",nocase; classtype:attempted-recon; sid:200020052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.mtdqmc.icu",nocase; classtype:attempted-recon; sid:200020053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ndkuwx.top",nocase; classtype:attempted-recon; sid:200020054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.neagfg.top",nocase; classtype:attempted-recon; sid:200020055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.njaczc.top",nocase; classtype:attempted-recon; sid:200020056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.obmxjj.top",nocase; classtype:attempted-recon; sid:200020057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ontgpj.top",nocase; classtype:attempted-recon; sid:200020058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.oshfrh.top",nocase; classtype:attempted-recon; sid:200020059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.oubbeh.top",nocase; classtype:attempted-recon; sid:200020060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.oxfasj.top",nocase; classtype:attempted-recon; sid:200020061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.p0mou1.icu",nocase; classtype:attempted-recon; sid:200020062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.p31bj2.icu",nocase; classtype:attempted-recon; sid:200020063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.p7251j.icu",nocase; classtype:attempted-recon; sid:200020064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.passoe.top",nocase; classtype:attempted-recon; sid:200020065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.pasytj.top",nocase; classtype:attempted-recon; sid:200020066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.pazzro.top",nocase; classtype:attempted-recon; sid:200020067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.pcukoi.icu",nocase; classtype:attempted-recon; sid:200020068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.qyaudr.top",nocase; classtype:attempted-recon; sid:200020069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.rlaptr.top",nocase; classtype:attempted-recon; sid:200020070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.rlrkoz.top",nocase; classtype:attempted-recon; sid:200020071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.rwuluo.top",nocase; classtype:attempted-recon; sid:200020072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.sk6y3y.icu",nocase; classtype:attempted-recon; sid:200020073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.slstjk.top",nocase; classtype:attempted-recon; sid:200020074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.tbsfgl.icu",nocase; classtype:attempted-recon; sid:200020075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.timuyw.icu",nocase; classtype:attempted-recon; sid:200020076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.tpwghl.top",nocase; classtype:attempted-recon; sid:200020077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.tutpfb.icu",nocase; classtype:attempted-recon; sid:200020078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.veuqdd.icu",nocase; classtype:attempted-recon; sid:200020079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.vghrha.top",nocase; classtype:attempted-recon; sid:200020080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.vnhemj.icu",nocase; classtype:attempted-recon; sid:200020081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.wfgyvk.top",nocase; classtype:attempted-recon; sid:200020082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.wgrfay.top",nocase; classtype:attempted-recon; sid:200020083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.xahccw.icu",nocase; classtype:attempted-recon; sid:200020084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.xgnrrh.top",nocase; classtype:attempted-recon; sid:200020085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.xqvlbl.top",nocase; classtype:attempted-recon; sid:200020086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ynaecg.top",nocase; classtype:attempted-recon; sid:200020087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ywcuuj.top",nocase; classtype:attempted-recon; sid:200020088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.ywzeqn.top",nocase; classtype:attempted-recon; sid:200020089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.zdealp.icu",nocase; classtype:attempted-recon; sid:200020090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.zllcxx.top",nocase; classtype:attempted-recon; sid:200020091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.zqlmyv.icu",nocase; classtype:attempted-recon; sid:200020092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.zxizqv.top",nocase; classtype:attempted-recon; sid:200020093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.a8m6di.icu",nocase; classtype:attempted-recon; sid:200020094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.aaxbpo.top",nocase; classtype:attempted-recon; sid:200020095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.adpslp.top",nocase; classtype:attempted-recon; sid:200020096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.aenjkw.top",nocase; classtype:attempted-recon; sid:200020097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.agdhkb.top",nocase; classtype:attempted-recon; sid:200020098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.akgjcb.top",nocase; classtype:attempted-recon; sid:200020099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.baelbg.top",nocase; classtype:attempted-recon; sid:200020100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200020101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.bkwgho.top",nocase; classtype:attempted-recon; sid:200020102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.bmknvf.top",nocase; classtype:attempted-recon; sid:200020103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.buzmri.top",nocase; classtype:attempted-recon; sid:200020104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.dgckut.top",nocase; classtype:attempted-recon; sid:200020105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.djtela.top",nocase; classtype:attempted-recon; sid:200020106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.dlhsif.top",nocase; classtype:attempted-recon; sid:200020107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.dnoftm.top",nocase; classtype:attempted-recon; sid:200020108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.doxryd.top",nocase; classtype:attempted-recon; sid:200020109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.dwxrym.top",nocase; classtype:attempted-recon; sid:200020110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.efcgly.icu",nocase; classtype:attempted-recon; sid:200020111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ejvyvo.top",nocase; classtype:attempted-recon; sid:200020112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.erkzgb.top",nocase; classtype:attempted-recon; sid:200020113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.erqvhz.icu",nocase; classtype:attempted-recon; sid:200020114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ewhdkk.top",nocase; classtype:attempted-recon; sid:200020115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.flgapj.top",nocase; classtype:attempted-recon; sid:200020116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200020117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.fviult.icu",nocase; classtype:attempted-recon; sid:200020118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.fwgrbb.top",nocase; classtype:attempted-recon; sid:200020119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.fxfbld.top",nocase; classtype:attempted-recon; sid:200020120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.gpik9c.icu",nocase; classtype:attempted-recon; sid:200020121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200020122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.hihmof.top",nocase; classtype:attempted-recon; sid:200020123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200020124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.hstoja.top",nocase; classtype:attempted-recon; sid:200020125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.icbupe.icu",nocase; classtype:attempted-recon; sid:200020126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ikjthi.top",nocase; classtype:attempted-recon; sid:200020127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ileuct.top",nocase; classtype:attempted-recon; sid:200020128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.iobrjq.icu",nocase; classtype:attempted-recon; sid:200020129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.iyfkny.top",nocase; classtype:attempted-recon; sid:200020130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.jashxw.icu",nocase; classtype:attempted-recon; sid:200020131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.jfqejr.icu",nocase; classtype:attempted-recon; sid:200020132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.joziry.top",nocase; classtype:attempted-recon; sid:200020133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.jvquad.top",nocase; classtype:attempted-recon; sid:200020134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.jvzxml.top",nocase; classtype:attempted-recon; sid:200020135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.jyszpt.top",nocase; classtype:attempted-recon; sid:200020136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.kdhnlt.top",nocase; classtype:attempted-recon; sid:200020137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.keud7w.icu",nocase; classtype:attempted-recon; sid:200020138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.kgflqd.top",nocase; classtype:attempted-recon; sid:200020139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.kkvrke.icu",nocase; classtype:attempted-recon; sid:200020140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.kosoht.icu",nocase; classtype:attempted-recon; sid:200020141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.laojhs.top",nocase; classtype:attempted-recon; sid:200020142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.lcq3yk.icu",nocase; classtype:attempted-recon; sid:200020143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ljnqqs.top",nocase; classtype:attempted-recon; sid:200020144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.llpgun.icu",nocase; classtype:attempted-recon; sid:200020145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.luiyci.top",nocase; classtype:attempted-recon; sid:200020146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.lxszsl.icu",nocase; classtype:attempted-recon; sid:200020147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.mleksy.top",nocase; classtype:attempted-recon; sid:200020148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.msiobh.top",nocase; classtype:attempted-recon; sid:200020149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.msphzi.top",nocase; classtype:attempted-recon; sid:200020150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.mtdqmc.icu",nocase; classtype:attempted-recon; sid:200020151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ndkuwx.top",nocase; classtype:attempted-recon; sid:200020152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.neagfg.top",nocase; classtype:attempted-recon; sid:200020153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.njaczc.top",nocase; classtype:attempted-recon; sid:200020154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.obmxjj.top",nocase; classtype:attempted-recon; sid:200020155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ontgpj.top",nocase; classtype:attempted-recon; sid:200020156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.oshfrh.top",nocase; classtype:attempted-recon; sid:200020157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.oubbeh.top",nocase; classtype:attempted-recon; sid:200020158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.oxfasj.top",nocase; classtype:attempted-recon; sid:200020159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.p0mou1.icu",nocase; classtype:attempted-recon; sid:200020160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.p31bj2.icu",nocase; classtype:attempted-recon; sid:200020161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.p7251j.icu",nocase; classtype:attempted-recon; sid:200020162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.passoe.top",nocase; classtype:attempted-recon; sid:200020163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.pasytj.top",nocase; classtype:attempted-recon; sid:200020164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.pazzro.top",nocase; classtype:attempted-recon; sid:200020165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.pcukoi.icu",nocase; classtype:attempted-recon; sid:200020166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.qyaudr.top",nocase; classtype:attempted-recon; sid:200020167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.rlaptr.top",nocase; classtype:attempted-recon; sid:200020168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.rlrkoz.top",nocase; classtype:attempted-recon; sid:200020169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.rwuluo.top",nocase; classtype:attempted-recon; sid:200020170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.sk6y3y.icu",nocase; classtype:attempted-recon; sid:200020171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.slstjk.top",nocase; classtype:attempted-recon; sid:200020172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.tbsfgl.icu",nocase; classtype:attempted-recon; sid:200020173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.timuyw.icu",nocase; classtype:attempted-recon; sid:200020174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.tpwghl.top",nocase; classtype:attempted-recon; sid:200020175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.tutpfb.icu",nocase; classtype:attempted-recon; sid:200020176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.veuqdd.icu",nocase; classtype:attempted-recon; sid:200020177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.vghrha.top",nocase; classtype:attempted-recon; sid:200020178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.vnhemj.icu",nocase; classtype:attempted-recon; sid:200020179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.wfgyvk.top",nocase; classtype:attempted-recon; sid:200020180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.wgrfay.top",nocase; classtype:attempted-recon; sid:200020181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.xahccw.icu",nocase; classtype:attempted-recon; sid:200020182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.xgnrrh.top",nocase; classtype:attempted-recon; sid:200020183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.xqvlbl.top",nocase; classtype:attempted-recon; sid:200020184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ynaecg.top",nocase; classtype:attempted-recon; sid:200020185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ywcuuj.top",nocase; classtype:attempted-recon; sid:200020186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.ywzeqn.top",nocase; classtype:attempted-recon; sid:200020187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.zdealp.icu",nocase; classtype:attempted-recon; sid:200020188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.zllcxx.top",nocase; classtype:attempted-recon; sid:200020189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.zqlmyv.icu",nocase; classtype:attempted-recon; sid:200020190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.zxizqv.top",nocase; classtype:attempted-recon; sid:200020191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.a8m6di.icu",nocase; classtype:attempted-recon; sid:200020192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.aaxbpo.top",nocase; classtype:attempted-recon; sid:200020193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.adpslp.top",nocase; classtype:attempted-recon; sid:200020194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.aenjkw.top",nocase; classtype:attempted-recon; sid:200020195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.agdhkb.top",nocase; classtype:attempted-recon; sid:200020196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.akgjcb.top",nocase; classtype:attempted-recon; sid:200020197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.baelbg.top",nocase; classtype:attempted-recon; sid:200020198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200020199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.bkwgho.top",nocase; classtype:attempted-recon; sid:200020200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.bmknvf.top",nocase; classtype:attempted-recon; sid:200020201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.buzmri.top",nocase; classtype:attempted-recon; sid:200020202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.dgckut.top",nocase; classtype:attempted-recon; sid:200020203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.djtela.top",nocase; classtype:attempted-recon; sid:200020204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.dlhsif.top",nocase; classtype:attempted-recon; sid:200020205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.dnoftm.top",nocase; classtype:attempted-recon; sid:200020206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.doxryd.top",nocase; classtype:attempted-recon; sid:200020207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.dwxrym.top",nocase; classtype:attempted-recon; sid:200020208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.dy1nam.icu",nocase; classtype:attempted-recon; sid:200020209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.efcgly.icu",nocase; classtype:attempted-recon; sid:200020210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ejvyvo.top",nocase; classtype:attempted-recon; sid:200020211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.erkzgb.top",nocase; classtype:attempted-recon; sid:200020212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.erqvhz.icu",nocase; classtype:attempted-recon; sid:200020213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ewhdkk.top",nocase; classtype:attempted-recon; sid:200020214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.flgapj.top",nocase; classtype:attempted-recon; sid:200020215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200020216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.fviult.icu",nocase; classtype:attempted-recon; sid:200020217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.fwgrbb.top",nocase; classtype:attempted-recon; sid:200020218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.fxfbld.top",nocase; classtype:attempted-recon; sid:200020219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.gpik9c.icu",nocase; classtype:attempted-recon; sid:200020220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200020221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.hihmof.top",nocase; classtype:attempted-recon; sid:200020222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200020223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.hstoja.top",nocase; classtype:attempted-recon; sid:200020224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.icbupe.icu",nocase; classtype:attempted-recon; sid:200020225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ikjthi.top",nocase; classtype:attempted-recon; sid:200020226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ileuct.top",nocase; classtype:attempted-recon; sid:200020227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.iobrjq.icu",nocase; classtype:attempted-recon; sid:200020228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.iyfkny.top",nocase; classtype:attempted-recon; sid:200020229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.jashxw.icu",nocase; classtype:attempted-recon; sid:200020230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.jfqejr.icu",nocase; classtype:attempted-recon; sid:200020231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.joziry.top",nocase; classtype:attempted-recon; sid:200020232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.jvquad.top",nocase; classtype:attempted-recon; sid:200020233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.jvzxml.top",nocase; classtype:attempted-recon; sid:200020234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.jyszpt.top",nocase; classtype:attempted-recon; sid:200020235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.kdhnlt.top",nocase; classtype:attempted-recon; sid:200020236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.keud7w.icu",nocase; classtype:attempted-recon; sid:200020237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.kgflqd.top",nocase; classtype:attempted-recon; sid:200020238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.kkvrke.icu",nocase; classtype:attempted-recon; sid:200020239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.kosoht.icu",nocase; classtype:attempted-recon; sid:200020240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.laojhs.top",nocase; classtype:attempted-recon; sid:200020241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.lcq3yk.icu",nocase; classtype:attempted-recon; sid:200020242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ljnqqs.top",nocase; classtype:attempted-recon; sid:200020243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.llpgun.icu",nocase; classtype:attempted-recon; sid:200020244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.luiyci.top",nocase; classtype:attempted-recon; sid:200020245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.lxszsl.icu",nocase; classtype:attempted-recon; sid:200020246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.mleksy.top",nocase; classtype:attempted-recon; sid:200020247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.msiobh.top",nocase; classtype:attempted-recon; sid:200020248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.msphzi.top",nocase; classtype:attempted-recon; sid:200020249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.mtdqmc.icu",nocase; classtype:attempted-recon; sid:200020250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ndkuwx.top",nocase; classtype:attempted-recon; sid:200020251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.neagfg.top",nocase; classtype:attempted-recon; sid:200020252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.njaczc.top",nocase; classtype:attempted-recon; sid:200020253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.obmxjj.top",nocase; classtype:attempted-recon; sid:200020254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ontgpj.top",nocase; classtype:attempted-recon; sid:200020255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.oshfrh.top",nocase; classtype:attempted-recon; sid:200020256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.oubbeh.top",nocase; classtype:attempted-recon; sid:200020257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.oxfasj.top",nocase; classtype:attempted-recon; sid:200020258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.p0mou1.icu",nocase; classtype:attempted-recon; sid:200020259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.p31bj2.icu",nocase; classtype:attempted-recon; sid:200020260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.p7251j.icu",nocase; classtype:attempted-recon; sid:200020261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.passoe.top",nocase; classtype:attempted-recon; sid:200020262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.pasytj.top",nocase; classtype:attempted-recon; sid:200020263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.pazzro.top",nocase; classtype:attempted-recon; sid:200020264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.pcukoi.icu",nocase; classtype:attempted-recon; sid:200020265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.qyaudr.top",nocase; classtype:attempted-recon; sid:200020266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.rlaptr.top",nocase; classtype:attempted-recon; sid:200020267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.rlrkoz.top",nocase; classtype:attempted-recon; sid:200020268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.rwuluo.top",nocase; classtype:attempted-recon; sid:200020269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.sk6y3y.icu",nocase; classtype:attempted-recon; sid:200020270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.slstjk.top",nocase; classtype:attempted-recon; sid:200020271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.tbsfgl.icu",nocase; classtype:attempted-recon; sid:200020272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.timuyw.icu",nocase; classtype:attempted-recon; sid:200020273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.tpwghl.top",nocase; classtype:attempted-recon; sid:200020274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.tutpfb.icu",nocase; classtype:attempted-recon; sid:200020275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.veuqdd.icu",nocase; classtype:attempted-recon; sid:200020276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.vghrha.top",nocase; classtype:attempted-recon; sid:200020277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.vnhemj.icu",nocase; classtype:attempted-recon; sid:200020278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.wfgyvk.top",nocase; classtype:attempted-recon; sid:200020279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.wgrfay.top",nocase; classtype:attempted-recon; sid:200020280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.xahccw.icu",nocase; classtype:attempted-recon; sid:200020281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.xgnrrh.top",nocase; classtype:attempted-recon; sid:200020282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.xqvlbl.top",nocase; classtype:attempted-recon; sid:200020283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ynaecg.top",nocase; classtype:attempted-recon; sid:200020284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ywcuuj.top",nocase; classtype:attempted-recon; sid:200020285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.ywzeqn.top",nocase; classtype:attempted-recon; sid:200020286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.zdealp.icu",nocase; classtype:attempted-recon; sid:200020287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.zllcxx.top",nocase; classtype:attempted-recon; sid:200020288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.zqlmyv.icu",nocase; classtype:attempted-recon; sid:200020289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.zxizqv.top",nocase; classtype:attempted-recon; sid:200020290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.a8m6di.icu",nocase; classtype:attempted-recon; sid:200020291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.aaxbpo.top",nocase; classtype:attempted-recon; sid:200020292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.adpslp.top",nocase; classtype:attempted-recon; sid:200020293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.aenjkw.top",nocase; classtype:attempted-recon; sid:200020294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.agdhkb.top",nocase; classtype:attempted-recon; sid:200020295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.akgjcb.top",nocase; classtype:attempted-recon; sid:200020296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.baelbg.top",nocase; classtype:attempted-recon; sid:200020297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200020298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.bkwgho.top",nocase; classtype:attempted-recon; sid:200020299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.bmknvf.top",nocase; classtype:attempted-recon; sid:200020300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.buzmri.top",nocase; classtype:attempted-recon; sid:200020301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.dgckut.top",nocase; classtype:attempted-recon; sid:200020302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.djtela.top",nocase; classtype:attempted-recon; sid:200020303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.dlhsif.top",nocase; classtype:attempted-recon; sid:200020304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.dnoftm.top",nocase; classtype:attempted-recon; sid:200020305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.doxryd.top",nocase; classtype:attempted-recon; sid:200020306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.dwxrym.top",nocase; classtype:attempted-recon; sid:200020307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.dy1nam.icu",nocase; classtype:attempted-recon; sid:200020308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.efcgly.icu",nocase; classtype:attempted-recon; sid:200020309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ejvyvo.top",nocase; classtype:attempted-recon; sid:200020310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.erkzgb.top",nocase; classtype:attempted-recon; sid:200020311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.erqvhz.icu",nocase; classtype:attempted-recon; sid:200020312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ewhdkk.top",nocase; classtype:attempted-recon; sid:200020313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.flgapj.top",nocase; classtype:attempted-recon; sid:200020314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200020315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.fviult.icu",nocase; classtype:attempted-recon; sid:200020316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.fwgrbb.top",nocase; classtype:attempted-recon; sid:200020317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.fxfbld.top",nocase; classtype:attempted-recon; sid:200020318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.gpik9c.icu",nocase; classtype:attempted-recon; sid:200020319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200020320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.hihmof.top",nocase; classtype:attempted-recon; sid:200020321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200020322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.hstoja.top",nocase; classtype:attempted-recon; sid:200020323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.icbupe.icu",nocase; classtype:attempted-recon; sid:200020324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ikjthi.top",nocase; classtype:attempted-recon; sid:200020325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ileuct.top",nocase; classtype:attempted-recon; sid:200020326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.iobrjq.icu",nocase; classtype:attempted-recon; sid:200020327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.iyfkny.top",nocase; classtype:attempted-recon; sid:200020328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.jashxw.icu",nocase; classtype:attempted-recon; sid:200020329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.jfqejr.icu",nocase; classtype:attempted-recon; sid:200020330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.joziry.top",nocase; classtype:attempted-recon; sid:200020331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.jvquad.top",nocase; classtype:attempted-recon; sid:200020332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.jvzxml.top",nocase; classtype:attempted-recon; sid:200020333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.jyszpt.top",nocase; classtype:attempted-recon; sid:200020334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.kdhnlt.top",nocase; classtype:attempted-recon; sid:200020335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.keud7w.icu",nocase; classtype:attempted-recon; sid:200020336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.kgflqd.top",nocase; classtype:attempted-recon; sid:200020337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.kkvrke.icu",nocase; classtype:attempted-recon; sid:200020338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.kosoht.icu",nocase; classtype:attempted-recon; sid:200020339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.laojhs.top",nocase; classtype:attempted-recon; sid:200020340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.lcq3yk.icu",nocase; classtype:attempted-recon; sid:200020341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ljnqqs.top",nocase; classtype:attempted-recon; sid:200020342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.llpgun.icu",nocase; classtype:attempted-recon; sid:200020343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.luiyci.top",nocase; classtype:attempted-recon; sid:200020344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.lxszsl.icu",nocase; classtype:attempted-recon; sid:200020345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.mleksy.top",nocase; classtype:attempted-recon; sid:200020346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.msiobh.top",nocase; classtype:attempted-recon; sid:200020347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.msphzi.top",nocase; classtype:attempted-recon; sid:200020348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.mtdqmc.icu",nocase; classtype:attempted-recon; sid:200020349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ndkuwx.top",nocase; classtype:attempted-recon; sid:200020350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.neagfg.top",nocase; classtype:attempted-recon; sid:200020351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.njaczc.top",nocase; classtype:attempted-recon; sid:200020352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.oshfrh.top",nocase; classtype:attempted-recon; sid:200020353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.oubbeh.top",nocase; classtype:attempted-recon; sid:200020354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.oxfasj.top",nocase; classtype:attempted-recon; sid:200020355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.p0mou1.icu",nocase; classtype:attempted-recon; sid:200020356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.p31bj2.icu",nocase; classtype:attempted-recon; sid:200020357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.p7251j.icu",nocase; classtype:attempted-recon; sid:200020358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.passoe.top",nocase; classtype:attempted-recon; sid:200020359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.pasytj.top",nocase; classtype:attempted-recon; sid:200020360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.pazzro.top",nocase; classtype:attempted-recon; sid:200020361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.pcukoi.icu",nocase; classtype:attempted-recon; sid:200020362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.qyaudr.top",nocase; classtype:attempted-recon; sid:200020363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.rlaptr.top",nocase; classtype:attempted-recon; sid:200020364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.rlrkoz.top",nocase; classtype:attempted-recon; sid:200020365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.rwuluo.top",nocase; classtype:attempted-recon; sid:200020366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.sk6y3y.icu",nocase; classtype:attempted-recon; sid:200020367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.slstjk.top",nocase; classtype:attempted-recon; sid:200020368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.tbsfgl.icu",nocase; classtype:attempted-recon; sid:200020369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.timuyw.icu",nocase; classtype:attempted-recon; sid:200020370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.tpwghl.top",nocase; classtype:attempted-recon; sid:200020371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.tutpfb.icu",nocase; classtype:attempted-recon; sid:200020372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.veuqdd.icu",nocase; classtype:attempted-recon; sid:200020373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.vghrha.top",nocase; classtype:attempted-recon; sid:200020374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.vnhemj.icu",nocase; classtype:attempted-recon; sid:200020375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.wfgyvk.top",nocase; classtype:attempted-recon; sid:200020376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.wgrfay.top",nocase; classtype:attempted-recon; sid:200020377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.xahccw.icu",nocase; classtype:attempted-recon; sid:200020378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.xgnrrh.top",nocase; classtype:attempted-recon; sid:200020379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.xqvlbl.top",nocase; classtype:attempted-recon; sid:200020380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ynaecg.top",nocase; classtype:attempted-recon; sid:200020381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ywcuuj.top",nocase; classtype:attempted-recon; sid:200020382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.ywzeqn.top",nocase; classtype:attempted-recon; sid:200020383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.zdealp.icu",nocase; classtype:attempted-recon; sid:200020384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.zllcxx.top",nocase; classtype:attempted-recon; sid:200020385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.zqlmyv.icu",nocase; classtype:attempted-recon; sid:200020386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.zxizqv.top",nocase; classtype:attempted-recon; sid:200020387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.a8m6di.icu",nocase; classtype:attempted-recon; sid:200020388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.aaxbpo.top",nocase; classtype:attempted-recon; sid:200020389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.adpslp.top",nocase; classtype:attempted-recon; sid:200020390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.aenjkw.top",nocase; classtype:attempted-recon; sid:200020391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.agdhkb.top",nocase; classtype:attempted-recon; sid:200020392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.akgjcb.top",nocase; classtype:attempted-recon; sid:200020393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.baelbg.top",nocase; classtype:attempted-recon; sid:200020394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200020395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.bkwgho.top",nocase; classtype:attempted-recon; sid:200020396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.bmknvf.top",nocase; classtype:attempted-recon; sid:200020397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.buzmri.top",nocase; classtype:attempted-recon; sid:200020398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.dgckut.top",nocase; classtype:attempted-recon; sid:200020399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.djtela.top",nocase; classtype:attempted-recon; sid:200020400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.dlhsif.top",nocase; classtype:attempted-recon; sid:200020401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.dnoftm.top",nocase; classtype:attempted-recon; sid:200020402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.doxryd.top",nocase; classtype:attempted-recon; sid:200020403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.dwxrym.top",nocase; classtype:attempted-recon; sid:200020404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.dy1nam.icu",nocase; classtype:attempted-recon; sid:200020405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.efcgly.icu",nocase; classtype:attempted-recon; sid:200020406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ejvyvo.top",nocase; classtype:attempted-recon; sid:200020407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.erkzgb.top",nocase; classtype:attempted-recon; sid:200020408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.erqvhz.icu",nocase; classtype:attempted-recon; sid:200020409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ewhdkk.top",nocase; classtype:attempted-recon; sid:200020410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.flgapj.top",nocase; classtype:attempted-recon; sid:200020411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200020412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.fviult.icu",nocase; classtype:attempted-recon; sid:200020413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.fwgrbb.top",nocase; classtype:attempted-recon; sid:200020414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.fxfbld.top",nocase; classtype:attempted-recon; sid:200020415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.gpik9c.icu",nocase; classtype:attempted-recon; sid:200020416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200020417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.hihmof.top",nocase; classtype:attempted-recon; sid:200020418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200020419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.hstoja.top",nocase; classtype:attempted-recon; sid:200020420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ikjthi.top",nocase; classtype:attempted-recon; sid:200020421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ileuct.top",nocase; classtype:attempted-recon; sid:200020422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.iobrjq.icu",nocase; classtype:attempted-recon; sid:200020423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.iyfkny.top",nocase; classtype:attempted-recon; sid:200020424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.jashxw.icu",nocase; classtype:attempted-recon; sid:200020425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.jfqejr.icu",nocase; classtype:attempted-recon; sid:200020426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.joziry.top",nocase; classtype:attempted-recon; sid:200020427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.jvquad.top",nocase; classtype:attempted-recon; sid:200020428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.jvzxml.top",nocase; classtype:attempted-recon; sid:200020429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.jyszpt.top",nocase; classtype:attempted-recon; sid:200020430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.kdhnlt.top",nocase; classtype:attempted-recon; sid:200020431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.keud7w.icu",nocase; classtype:attempted-recon; sid:200020432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.kgflqd.top",nocase; classtype:attempted-recon; sid:200020433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.kkvrke.icu",nocase; classtype:attempted-recon; sid:200020434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.kosoht.icu",nocase; classtype:attempted-recon; sid:200020435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ndkuwx.top",nocase; classtype:attempted-recon; sid:200020436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.neagfg.top",nocase; classtype:attempted-recon; sid:200020437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.njaczc.top",nocase; classtype:attempted-recon; sid:200020438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.obmxjj.top",nocase; classtype:attempted-recon; sid:200020439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ontgpj.top",nocase; classtype:attempted-recon; sid:200020440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.oshfrh.top",nocase; classtype:attempted-recon; sid:200020441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.oubbeh.top",nocase; classtype:attempted-recon; sid:200020442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.oxfasj.top",nocase; classtype:attempted-recon; sid:200020443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.p0mou1.icu",nocase; classtype:attempted-recon; sid:200020444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.p31bj2.icu",nocase; classtype:attempted-recon; sid:200020445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.p7251j.icu",nocase; classtype:attempted-recon; sid:200020446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.passoe.top",nocase; classtype:attempted-recon; sid:200020447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.pasytj.top",nocase; classtype:attempted-recon; sid:200020448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.pazzro.top",nocase; classtype:attempted-recon; sid:200020449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.pcukoi.icu",nocase; classtype:attempted-recon; sid:200020450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.qyaudr.top",nocase; classtype:attempted-recon; sid:200020451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.rlaptr.top",nocase; classtype:attempted-recon; sid:200020452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.rlrkoz.top",nocase; classtype:attempted-recon; sid:200020453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.rwuluo.top",nocase; classtype:attempted-recon; sid:200020454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.sk6y3y.icu",nocase; classtype:attempted-recon; sid:200020455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.slstjk.top",nocase; classtype:attempted-recon; sid:200020456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.tbsfgl.icu",nocase; classtype:attempted-recon; sid:200020457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.timuyw.icu",nocase; classtype:attempted-recon; sid:200020458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.tpwghl.top",nocase; classtype:attempted-recon; sid:200020459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.tutpfb.icu",nocase; classtype:attempted-recon; sid:200020460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.veuqdd.icu",nocase; classtype:attempted-recon; sid:200020461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.vghrha.top",nocase; classtype:attempted-recon; sid:200020462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.vnhemj.icu",nocase; classtype:attempted-recon; sid:200020463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.wfgyvk.top",nocase; classtype:attempted-recon; sid:200020464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.wgrfay.top",nocase; classtype:attempted-recon; sid:200020465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.xahccw.icu",nocase; classtype:attempted-recon; sid:200020466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.xgnrrh.top",nocase; classtype:attempted-recon; sid:200020467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.xqvlbl.top",nocase; classtype:attempted-recon; sid:200020468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ynaecg.top",nocase; classtype:attempted-recon; sid:200020469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ywcuuj.top",nocase; classtype:attempted-recon; sid:200020470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.ywzeqn.top",nocase; classtype:attempted-recon; sid:200020471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.zdealp.icu",nocase; classtype:attempted-recon; sid:200020472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.zllcxx.top",nocase; classtype:attempted-recon; sid:200020473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.zqlmyv.icu",nocase; classtype:attempted-recon; sid:200020474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.zxizqv.top",nocase; classtype:attempted-recon; sid:200020475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.a8m6di.icu",nocase; classtype:attempted-recon; sid:200020476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.aaxbpo.top",nocase; classtype:attempted-recon; sid:200020477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.adpslp.top",nocase; classtype:attempted-recon; sid:200020478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.aenjkw.top",nocase; classtype:attempted-recon; sid:200020479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.agdhkb.top",nocase; classtype:attempted-recon; sid:200020480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.akgjcb.top",nocase; classtype:attempted-recon; sid:200020481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.baelbg.top",nocase; classtype:attempted-recon; sid:200020482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200020483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.bkwgho.top",nocase; classtype:attempted-recon; sid:200020484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.bmknvf.top",nocase; classtype:attempted-recon; sid:200020485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.buzmri.top",nocase; classtype:attempted-recon; sid:200020486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.dgckut.top",nocase; classtype:attempted-recon; sid:200020487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.djtela.top",nocase; classtype:attempted-recon; sid:200020488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.dlhsif.top",nocase; classtype:attempted-recon; sid:200020489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.dnoftm.top",nocase; classtype:attempted-recon; sid:200020490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.doxryd.top",nocase; classtype:attempted-recon; sid:200020491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.dwxrym.top",nocase; classtype:attempted-recon; sid:200020492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.dy1nam.icu",nocase; classtype:attempted-recon; sid:200020493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.efcgly.icu",nocase; classtype:attempted-recon; sid:200020494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ejvyvo.top",nocase; classtype:attempted-recon; sid:200020495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.erkzgb.top",nocase; classtype:attempted-recon; sid:200020496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.erqvhz.icu",nocase; classtype:attempted-recon; sid:200020497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ewhdkk.top",nocase; classtype:attempted-recon; sid:200020498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.flgapj.top",nocase; classtype:attempted-recon; sid:200020499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200020500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.fviult.icu",nocase; classtype:attempted-recon; sid:200020501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.fwgrbb.top",nocase; classtype:attempted-recon; sid:200020502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.fxfbld.top",nocase; classtype:attempted-recon; sid:200020503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.gpik9c.icu",nocase; classtype:attempted-recon; sid:200020504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200020505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.hihmof.top",nocase; classtype:attempted-recon; sid:200020506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200020507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.hstoja.top",nocase; classtype:attempted-recon; sid:200020508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.icbupe.icu",nocase; classtype:attempted-recon; sid:200020509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ikjthi.top",nocase; classtype:attempted-recon; sid:200020510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ileuct.top",nocase; classtype:attempted-recon; sid:200020511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.iobrjq.icu",nocase; classtype:attempted-recon; sid:200020512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.iyfkny.top",nocase; classtype:attempted-recon; sid:200020513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.jashxw.icu",nocase; classtype:attempted-recon; sid:200020514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.jfqejr.icu",nocase; classtype:attempted-recon; sid:200020515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.joziry.top",nocase; classtype:attempted-recon; sid:200020516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.jvquad.top",nocase; classtype:attempted-recon; sid:200020517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.jvzxml.top",nocase; classtype:attempted-recon; sid:200020518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.jyszpt.top",nocase; classtype:attempted-recon; sid:200020519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.kdhnlt.top",nocase; classtype:attempted-recon; sid:200020520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.keud7w.icu",nocase; classtype:attempted-recon; sid:200020521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.kgflqd.top",nocase; classtype:attempted-recon; sid:200020522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.kkvrke.icu",nocase; classtype:attempted-recon; sid:200020523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.kosoht.icu",nocase; classtype:attempted-recon; sid:200020524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.laojhs.top",nocase; classtype:attempted-recon; sid:200020525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.lcq3yk.icu",nocase; classtype:attempted-recon; sid:200020526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ljnqqs.top",nocase; classtype:attempted-recon; sid:200020527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.llpgun.icu",nocase; classtype:attempted-recon; sid:200020528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.luiyci.top",nocase; classtype:attempted-recon; sid:200020529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.lxszsl.icu",nocase; classtype:attempted-recon; sid:200020530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.mleksy.top",nocase; classtype:attempted-recon; sid:200020531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.msiobh.top",nocase; classtype:attempted-recon; sid:200020532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.msphzi.top",nocase; classtype:attempted-recon; sid:200020533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.mtdqmc.icu",nocase; classtype:attempted-recon; sid:200020534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ndkuwx.top",nocase; classtype:attempted-recon; sid:200020535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.neagfg.top",nocase; classtype:attempted-recon; sid:200020536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.njaczc.top",nocase; classtype:attempted-recon; sid:200020537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.obmxjj.top",nocase; classtype:attempted-recon; sid:200020538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ontgpj.top",nocase; classtype:attempted-recon; sid:200020539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.oshfrh.top",nocase; classtype:attempted-recon; sid:200020540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.oubbeh.top",nocase; classtype:attempted-recon; sid:200020541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.oxfasj.top",nocase; classtype:attempted-recon; sid:200020542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.p0mou1.icu",nocase; classtype:attempted-recon; sid:200020543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.p31bj2.icu",nocase; classtype:attempted-recon; sid:200020544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.p7251j.icu",nocase; classtype:attempted-recon; sid:200020545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.passoe.top",nocase; classtype:attempted-recon; sid:200020546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.pasytj.top",nocase; classtype:attempted-recon; sid:200020547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.pazzro.top",nocase; classtype:attempted-recon; sid:200020548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.pcukoi.icu",nocase; classtype:attempted-recon; sid:200020549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.qyaudr.top",nocase; classtype:attempted-recon; sid:200020550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.rlaptr.top",nocase; classtype:attempted-recon; sid:200020551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.rlrkoz.top",nocase; classtype:attempted-recon; sid:200020552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.rwuluo.top",nocase; classtype:attempted-recon; sid:200020553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.sk6y3y.icu",nocase; classtype:attempted-recon; sid:200020554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.slstjk.top",nocase; classtype:attempted-recon; sid:200020555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.tbsfgl.icu",nocase; classtype:attempted-recon; sid:200020556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.timuyw.icu",nocase; classtype:attempted-recon; sid:200020557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.tpwghl.top",nocase; classtype:attempted-recon; sid:200020558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.tutpfb.icu",nocase; classtype:attempted-recon; sid:200020559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.veuqdd.icu",nocase; classtype:attempted-recon; sid:200020560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.vghrha.top",nocase; classtype:attempted-recon; sid:200020561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.vnhemj.icu",nocase; classtype:attempted-recon; sid:200020562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.wfgyvk.top",nocase; classtype:attempted-recon; sid:200020563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.wgrfay.top",nocase; classtype:attempted-recon; sid:200020564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.xahccw.icu",nocase; classtype:attempted-recon; sid:200020565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.xgnrrh.top",nocase; classtype:attempted-recon; sid:200020566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.xqvlbl.top",nocase; classtype:attempted-recon; sid:200020567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ynaecg.top",nocase; classtype:attempted-recon; sid:200020568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ywcuuj.top",nocase; classtype:attempted-recon; sid:200020569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.ywzeqn.top",nocase; classtype:attempted-recon; sid:200020570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.zdealp.icu",nocase; classtype:attempted-recon; sid:200020571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.zllcxx.top",nocase; classtype:attempted-recon; sid:200020572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.zqlmyv.icu",nocase; classtype:attempted-recon; sid:200020573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.zxizqv.top",nocase; classtype:attempted-recon; sid:200020574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.a8m6di.icu",nocase; classtype:attempted-recon; sid:200020575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.aaxbpo.top",nocase; classtype:attempted-recon; sid:200020576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.adpslp.top",nocase; classtype:attempted-recon; sid:200020577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.aenjkw.top",nocase; classtype:attempted-recon; sid:200020578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.agdhkb.top",nocase; classtype:attempted-recon; sid:200020579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.akgjcb.top",nocase; classtype:attempted-recon; sid:200020580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.baelbg.top",nocase; classtype:attempted-recon; sid:200020581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200020582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.bkwgho.top",nocase; classtype:attempted-recon; sid:200020583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.bmknvf.top",nocase; classtype:attempted-recon; sid:200020584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.buzmri.top",nocase; classtype:attempted-recon; sid:200020585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.dgckut.top",nocase; classtype:attempted-recon; sid:200020586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.djtela.top",nocase; classtype:attempted-recon; sid:200020587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.dlhsif.top",nocase; classtype:attempted-recon; sid:200020588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.dnoftm.top",nocase; classtype:attempted-recon; sid:200020589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.doxryd.top",nocase; classtype:attempted-recon; sid:200020590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.dwxrym.top",nocase; classtype:attempted-recon; sid:200020591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.dy1nam.icu",nocase; classtype:attempted-recon; sid:200020592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.efcgly.icu",nocase; classtype:attempted-recon; sid:200020593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ejvyvo.top",nocase; classtype:attempted-recon; sid:200020594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.erkzgb.top",nocase; classtype:attempted-recon; sid:200020595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.erqvhz.icu",nocase; classtype:attempted-recon; sid:200020596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ewhdkk.top",nocase; classtype:attempted-recon; sid:200020597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.flgapj.top",nocase; classtype:attempted-recon; sid:200020598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200020599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.fviult.icu",nocase; classtype:attempted-recon; sid:200020600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.fwgrbb.top",nocase; classtype:attempted-recon; sid:200020601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.fxfbld.top",nocase; classtype:attempted-recon; sid:200020602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.gpik9c.icu",nocase; classtype:attempted-recon; sid:200020603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200020604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.hihmof.top",nocase; classtype:attempted-recon; sid:200020605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200020606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.hstoja.top",nocase; classtype:attempted-recon; sid:200020607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.icbupe.icu",nocase; classtype:attempted-recon; sid:200020608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ikjthi.top",nocase; classtype:attempted-recon; sid:200020609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ileuct.top",nocase; classtype:attempted-recon; sid:200020610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.iobrjq.icu",nocase; classtype:attempted-recon; sid:200020611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.iyfkny.top",nocase; classtype:attempted-recon; sid:200020612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.jashxw.icu",nocase; classtype:attempted-recon; sid:200020613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.jfqejr.icu",nocase; classtype:attempted-recon; sid:200020614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.joziry.top",nocase; classtype:attempted-recon; sid:200020615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.jvquad.top",nocase; classtype:attempted-recon; sid:200020616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.jvzxml.top",nocase; classtype:attempted-recon; sid:200020617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.jyszpt.top",nocase; classtype:attempted-recon; sid:200020618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.kdhnlt.top",nocase; classtype:attempted-recon; sid:200020619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.keud7w.icu",nocase; classtype:attempted-recon; sid:200020620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.kgflqd.top",nocase; classtype:attempted-recon; sid:200020621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.kkvrke.icu",nocase; classtype:attempted-recon; sid:200020622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.kosoht.icu",nocase; classtype:attempted-recon; sid:200020623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.laojhs.top",nocase; classtype:attempted-recon; sid:200020624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.lcq3yk.icu",nocase; classtype:attempted-recon; sid:200020625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ljnqqs.top",nocase; classtype:attempted-recon; sid:200020626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.llpgun.icu",nocase; classtype:attempted-recon; sid:200020627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.luiyci.top",nocase; classtype:attempted-recon; sid:200020628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.lxszsl.icu",nocase; classtype:attempted-recon; sid:200020629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.mleksy.top",nocase; classtype:attempted-recon; sid:200020630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.msiobh.top",nocase; classtype:attempted-recon; sid:200020631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.msphzi.top",nocase; classtype:attempted-recon; sid:200020632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.mtdqmc.icu",nocase; classtype:attempted-recon; sid:200020633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ndkuwx.top",nocase; classtype:attempted-recon; sid:200020634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.neagfg.top",nocase; classtype:attempted-recon; sid:200020635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.njaczc.top",nocase; classtype:attempted-recon; sid:200020636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.obmxjj.top",nocase; classtype:attempted-recon; sid:200020637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ontgpj.top",nocase; classtype:attempted-recon; sid:200020638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.oshfrh.top",nocase; classtype:attempted-recon; sid:200020639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.oubbeh.top",nocase; classtype:attempted-recon; sid:200020640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.oxfasj.top",nocase; classtype:attempted-recon; sid:200020641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.p0mou1.icu",nocase; classtype:attempted-recon; sid:200020642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.p31bj2.icu",nocase; classtype:attempted-recon; sid:200020643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.p7251j.icu",nocase; classtype:attempted-recon; sid:200020644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.passoe.top",nocase; classtype:attempted-recon; sid:200020645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.pasytj.top",nocase; classtype:attempted-recon; sid:200020646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.pazzro.top",nocase; classtype:attempted-recon; sid:200020647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.pcukoi.icu",nocase; classtype:attempted-recon; sid:200020648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.qyaudr.top",nocase; classtype:attempted-recon; sid:200020649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.rlaptr.top",nocase; classtype:attempted-recon; sid:200020650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.rlrkoz.top",nocase; classtype:attempted-recon; sid:200020651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.rwuluo.top",nocase; classtype:attempted-recon; sid:200020652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.sk6y3y.icu",nocase; classtype:attempted-recon; sid:200020653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.slstjk.top",nocase; classtype:attempted-recon; sid:200020654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.tbsfgl.icu",nocase; classtype:attempted-recon; sid:200020655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.timuyw.icu",nocase; classtype:attempted-recon; sid:200020656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.tpwghl.top",nocase; classtype:attempted-recon; sid:200020657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.tutpfb.icu",nocase; classtype:attempted-recon; sid:200020658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.veuqdd.icu",nocase; classtype:attempted-recon; sid:200020659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.vghrha.top",nocase; classtype:attempted-recon; sid:200020660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.vnhemj.icu",nocase; classtype:attempted-recon; sid:200020661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.wfgyvk.top",nocase; classtype:attempted-recon; sid:200020662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.wgrfay.top",nocase; classtype:attempted-recon; sid:200020663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.xahccw.icu",nocase; classtype:attempted-recon; sid:200020664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.xgnrrh.top",nocase; classtype:attempted-recon; sid:200020665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.xqvlbl.top",nocase; classtype:attempted-recon; sid:200020666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ynaecg.top",nocase; classtype:attempted-recon; sid:200020667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ywcuuj.top",nocase; classtype:attempted-recon; sid:200020668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.ywzeqn.top",nocase; classtype:attempted-recon; sid:200020669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.zdealp.icu",nocase; classtype:attempted-recon; sid:200020670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.zllcxx.top",nocase; classtype:attempted-recon; sid:200020671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.zqlmyv.icu",nocase; classtype:attempted-recon; sid:200020672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.zxizqv.top",nocase; classtype:attempted-recon; sid:200020673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.a8m6di.icu",nocase; classtype:attempted-recon; sid:200020674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.aaxbpo.top",nocase; classtype:attempted-recon; sid:200020675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.adpslp.top",nocase; classtype:attempted-recon; sid:200020676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.aenjkw.top",nocase; classtype:attempted-recon; sid:200020677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.agdhkb.top",nocase; classtype:attempted-recon; sid:200020678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.akgjcb.top",nocase; classtype:attempted-recon; sid:200020679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.baelbg.top",nocase; classtype:attempted-recon; sid:200020680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.bhqnyq.icu",nocase; classtype:attempted-recon; sid:200020681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.bkwgho.top",nocase; classtype:attempted-recon; sid:200020682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.bmknvf.top",nocase; classtype:attempted-recon; sid:200020683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.buzmri.top",nocase; classtype:attempted-recon; sid:200020684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.dgckut.top",nocase; classtype:attempted-recon; sid:200020685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.djtela.top",nocase; classtype:attempted-recon; sid:200020686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.dlhsif.top",nocase; classtype:attempted-recon; sid:200020687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.dnoftm.top",nocase; classtype:attempted-recon; sid:200020688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.doxryd.top",nocase; classtype:attempted-recon; sid:200020689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.dwxrym.top",nocase; classtype:attempted-recon; sid:200020690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.dy1nam.icu",nocase; classtype:attempted-recon; sid:200020691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.efcgly.icu",nocase; classtype:attempted-recon; sid:200020692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ejvyvo.top",nocase; classtype:attempted-recon; sid:200020693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.erkzgb.top",nocase; classtype:attempted-recon; sid:200020694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.erqvhz.icu",nocase; classtype:attempted-recon; sid:200020695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ewhdkk.top",nocase; classtype:attempted-recon; sid:200020696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.flgapj.top",nocase; classtype:attempted-recon; sid:200020697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ftnnvo.icu",nocase; classtype:attempted-recon; sid:200020698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.fviult.icu",nocase; classtype:attempted-recon; sid:200020699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.fwgrbb.top",nocase; classtype:attempted-recon; sid:200020700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.fxfbld.top",nocase; classtype:attempted-recon; sid:200020701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.gpik9c.icu",nocase; classtype:attempted-recon; sid:200020702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.gy8u8m.icu",nocase; classtype:attempted-recon; sid:200020703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.hihmof.top",nocase; classtype:attempted-recon; sid:200020704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.hnyrvh.icu",nocase; classtype:attempted-recon; sid:200020705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.hstoja.top",nocase; classtype:attempted-recon; sid:200020706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.icbupe.icu",nocase; classtype:attempted-recon; sid:200020707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ikjthi.top",nocase; classtype:attempted-recon; sid:200020708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ileuct.top",nocase; classtype:attempted-recon; sid:200020709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.iobrjq.icu",nocase; classtype:attempted-recon; sid:200020710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.iyfkny.top",nocase; classtype:attempted-recon; sid:200020711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.jashxw.icu",nocase; classtype:attempted-recon; sid:200020712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.jfqejr.icu",nocase; classtype:attempted-recon; sid:200020713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.joziry.top",nocase; classtype:attempted-recon; sid:200020714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.jvquad.top",nocase; classtype:attempted-recon; sid:200020715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.jvzxml.top",nocase; classtype:attempted-recon; sid:200020716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.jyszpt.top",nocase; classtype:attempted-recon; sid:200020717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.kdhnlt.top",nocase; classtype:attempted-recon; sid:200020718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.keud7w.icu",nocase; classtype:attempted-recon; sid:200020719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.kgflqd.top",nocase; classtype:attempted-recon; sid:200020720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.kkvrke.icu",nocase; classtype:attempted-recon; sid:200020721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.kosoht.icu",nocase; classtype:attempted-recon; sid:200020722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.laojhs.top",nocase; classtype:attempted-recon; sid:200020723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.lcq3yk.icu",nocase; classtype:attempted-recon; sid:200020724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ljnqqs.top",nocase; classtype:attempted-recon; sid:200020725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.llpgun.icu",nocase; classtype:attempted-recon; sid:200020726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.luiyci.top",nocase; classtype:attempted-recon; sid:200020727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.lxszsl.icu",nocase; classtype:attempted-recon; sid:200020728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.mleksy.top",nocase; classtype:attempted-recon; sid:200020729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.msiobh.top",nocase; classtype:attempted-recon; sid:200020730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.msphzi.top",nocase; classtype:attempted-recon; sid:200020731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.mtdqmc.icu",nocase; classtype:attempted-recon; sid:200020732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ndkuwx.top",nocase; classtype:attempted-recon; sid:200020733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.neagfg.top",nocase; classtype:attempted-recon; sid:200020734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.njaczc.top",nocase; classtype:attempted-recon; sid:200020735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.obmxjj.top",nocase; classtype:attempted-recon; sid:200020736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ontgpj.top",nocase; classtype:attempted-recon; sid:200020737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.oshfrh.top",nocase; classtype:attempted-recon; sid:200020738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.oubbeh.top",nocase; classtype:attempted-recon; sid:200020739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.oxfasj.top",nocase; classtype:attempted-recon; sid:200020740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.p0mou1.icu",nocase; classtype:attempted-recon; sid:200020741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.p31bj2.icu",nocase; classtype:attempted-recon; sid:200020742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.p7251j.icu",nocase; classtype:attempted-recon; sid:200020743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.passoe.top",nocase; classtype:attempted-recon; sid:200020744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.pasytj.top",nocase; classtype:attempted-recon; sid:200020745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.pazzro.top",nocase; classtype:attempted-recon; sid:200020746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.pcukoi.icu",nocase; classtype:attempted-recon; sid:200020747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.qyaudr.top",nocase; classtype:attempted-recon; sid:200020748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.rlaptr.top",nocase; classtype:attempted-recon; sid:200020749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.rlrkoz.top",nocase; classtype:attempted-recon; sid:200020750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.rwuluo.top",nocase; classtype:attempted-recon; sid:200020751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.sk6y3y.icu",nocase; classtype:attempted-recon; sid:200020752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.slstjk.top",nocase; classtype:attempted-recon; sid:200020753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.tbsfgl.icu",nocase; classtype:attempted-recon; sid:200020754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.timuyw.icu",nocase; classtype:attempted-recon; sid:200020755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.tpwghl.top",nocase; classtype:attempted-recon; sid:200020756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.tutpfb.icu",nocase; classtype:attempted-recon; sid:200020757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.veuqdd.icu",nocase; classtype:attempted-recon; sid:200020758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.vghrha.top",nocase; classtype:attempted-recon; sid:200020759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.vnhemj.icu",nocase; classtype:attempted-recon; sid:200020760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.wfgyvk.top",nocase; classtype:attempted-recon; sid:200020761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.wgrfay.top",nocase; classtype:attempted-recon; sid:200020762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.xahccw.icu",nocase; classtype:attempted-recon; sid:200020763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.xgnrrh.top",nocase; classtype:attempted-recon; sid:200020764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.xqvlbl.top",nocase; classtype:attempted-recon; sid:200020765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ynaecg.top",nocase; classtype:attempted-recon; sid:200020766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ywcuuj.top",nocase; classtype:attempted-recon; sid:200020767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.ywzeqn.top",nocase; classtype:attempted-recon; sid:200020768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.zdealp.icu",nocase; classtype:attempted-recon; sid:200020769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.zllcxx.top",nocase; classtype:attempted-recon; sid:200020770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.zqlmyv.icu",nocase; classtype:attempted-recon; sid:200020771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.zxizqv.top",nocase; classtype:attempted-recon; sid:200020772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vietgahp.com",nocase; classtype:attempted-recon; sid:200020773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viettel-com-dot-c2c01-531c7.uc.r.appspot.com",nocase; classtype:attempted-recon; sid:200020774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-folder-share-doc-file.firebaseapp.com",nocase; classtype:attempted-recon; sid:200020775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-folder-share-doc-file.web.app",nocase; classtype:attempted-recon; sid:200020776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-folder-share-doc-logistic.firebaseapp.com",nocase; classtype:attempted-recon; sid:200020777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-folder-share-doc-logistic.web.app",nocase; classtype:attempted-recon; sid:200020778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-power-share-file.firebaseapp.com",nocase; classtype:attempted-recon; sid:200020779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-power-share-file.web.app",nocase; classtype:attempted-recon; sid:200020780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-report.com",nocase; classtype:attempted-recon; sid:200020781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-share-folder-file.firebaseapp.com",nocase; classtype:attempted-recon; sid:200020782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-share-folder-file.web.app",nocase; classtype:attempted-recon; sid:200020783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-shared-file-folder-login.firebaseapp.com",nocase; classtype:attempted-recon; sid:200020784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-shared-file-folder-login.web.app",nocase; classtype:attempted-recon; sid:200020785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view.campanhasbradesco.com.br",nocase; classtype:attempted-recon; sid:200020786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viewthescreen.com",nocase; classtype:attempted-recon; sid:200020787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vihted-dispatch.5478906.xyz",nocase; classtype:attempted-recon; sid:200020788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vihted-product.76589903.xyz",nocase; classtype:attempted-recon; sid:200020789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vimtechwatersolution.com",nocase; classtype:attempted-recon; sid:200020790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.baflrzt.rest",nocase; classtype:attempted-recon; sid:200020791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.bftggqb.rest",nocase; classtype:attempted-recon; sid:200020792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.bhppmal.rest",nocase; classtype:attempted-recon; sid:200020793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.bkiljbe.rest",nocase; classtype:attempted-recon; sid:200020794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.bwcpfbn.rest",nocase; classtype:attempted-recon; sid:200020795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.cnufsqh.rest",nocase; classtype:attempted-recon; sid:200020796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.ctuhgfk.rest",nocase; classtype:attempted-recon; sid:200020797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.drdsyje.rest",nocase; classtype:attempted-recon; sid:200020798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.dtgskgr.rest",nocase; classtype:attempted-recon; sid:200020799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.dvbkugk.rest",nocase; classtype:attempted-recon; sid:200020800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.dwvwhpm.rest",nocase; classtype:attempted-recon; sid:200020801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.eaplgjq.rest",nocase; classtype:attempted-recon; sid:200020802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.ehsqatn.rest",nocase; classtype:attempted-recon; sid:200020803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.emfeyds.rest",nocase; classtype:attempted-recon; sid:200020804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.fcuccth.rest",nocase; classtype:attempted-recon; sid:200020805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.fikixuj.rest",nocase; classtype:attempted-recon; sid:200020806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.ftpstbj.rest",nocase; classtype:attempted-recon; sid:200020807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.fuivkxa.rest",nocase; classtype:attempted-recon; sid:200020808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.fzjyqpy.rest",nocase; classtype:attempted-recon; sid:200020809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.gemisns.rest",nocase; classtype:attempted-recon; sid:200020810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.ggqugsu.rest",nocase; classtype:attempted-recon; sid:200020811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.gvzoadd.rest",nocase; classtype:attempted-recon; sid:200020812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.gybmzej.rest",nocase; classtype:attempted-recon; sid:200020813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.gywmubl.rest",nocase; classtype:attempted-recon; sid:200020814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.hbzrhor.rest",nocase; classtype:attempted-recon; sid:200020815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.hexttrd.rest",nocase; classtype:attempted-recon; sid:200020816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.hmamatm.rest",nocase; classtype:attempted-recon; sid:200020817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.hqgidqk.rest",nocase; classtype:attempted-recon; sid:200020818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.hymzwrr.rest",nocase; classtype:attempted-recon; sid:200020819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.hynvkvn.rest",nocase; classtype:attempted-recon; sid:200020820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.igsxqxl.rest",nocase; classtype:attempted-recon; sid:200020821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.iktxxwb.rest",nocase; classtype:attempted-recon; sid:200020822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.ipvrmgx.rest",nocase; classtype:attempted-recon; sid:200020823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.iuwqqxo.rest",nocase; classtype:attempted-recon; sid:200020824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.jeseavd.rest",nocase; classtype:attempted-recon; sid:200020825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.jjmxonp.rest",nocase; classtype:attempted-recon; sid:200020826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.kteglik.rest",nocase; classtype:attempted-recon; sid:200020827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.kzoatrc.rest",nocase; classtype:attempted-recon; sid:200020828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.lghbwne.rest",nocase; classtype:attempted-recon; sid:200020829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.lihewoq.rest",nocase; classtype:attempted-recon; sid:200020830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.lmbtnda.rest",nocase; classtype:attempted-recon; sid:200020831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.lmdmaum.rest",nocase; classtype:attempted-recon; sid:200020832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.loszost.rest",nocase; classtype:attempted-recon; sid:200020833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.mbjalki.rest",nocase; classtype:attempted-recon; sid:200020834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.mbwcvge.rest",nocase; classtype:attempted-recon; sid:200020835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.mfbkvgm.rest",nocase; classtype:attempted-recon; sid:200020836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.mrdefgv.rest",nocase; classtype:attempted-recon; sid:200020837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.mrqfkgo.rest",nocase; classtype:attempted-recon; sid:200020838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.mtfamvq.rest",nocase; classtype:attempted-recon; sid:200020839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.needmwo.rest",nocase; classtype:attempted-recon; sid:200020840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.nhqgutl.rest",nocase; classtype:attempted-recon; sid:200020841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.njtawnu.rest",nocase; classtype:attempted-recon; sid:200020842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.nqhviyu.rest",nocase; classtype:attempted-recon; sid:200020843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.ntsckua.rest",nocase; classtype:attempted-recon; sid:200020844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.nulhvqm.rest",nocase; classtype:attempted-recon; sid:200020845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.obfutzz.rest",nocase; classtype:attempted-recon; sid:200020846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.ocsbjyy.rest",nocase; classtype:attempted-recon; sid:200020847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.ogztqfa.rest",nocase; classtype:attempted-recon; sid:200020848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.onggczh.rest",nocase; classtype:attempted-recon; sid:200020849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.ouqcrce.rest",nocase; classtype:attempted-recon; sid:200020850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.ovuydax.rest",nocase; classtype:attempted-recon; sid:200020851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.palxshs.rest",nocase; classtype:attempted-recon; sid:200020852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.pbeozzc.rest",nocase; classtype:attempted-recon; sid:200020853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.pefczzw.rest",nocase; classtype:attempted-recon; sid:200020854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.pfvdgcs.rest",nocase; classtype:attempted-recon; sid:200020855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.poywtcc.rest",nocase; classtype:attempted-recon; sid:200020856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.prcjndo.rest",nocase; classtype:attempted-recon; sid:200020857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.pyamdhg.rest",nocase; classtype:attempted-recon; sid:200020858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.qcgneuj.rest",nocase; classtype:attempted-recon; sid:200020859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.qmvhsgu.rest",nocase; classtype:attempted-recon; sid:200020860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.qthlkxf.rest",nocase; classtype:attempted-recon; sid:200020861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.qtroqhr.rest",nocase; classtype:attempted-recon; sid:200020862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.qwacvnw.rest",nocase; classtype:attempted-recon; sid:200020863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.ranzilm.rest",nocase; classtype:attempted-recon; sid:200020864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.rjwdmhv.rest",nocase; classtype:attempted-recon; sid:200020865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.rkzcxlj.rest",nocase; classtype:attempted-recon; sid:200020866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.rpqqioa.rest",nocase; classtype:attempted-recon; sid:200020867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.rtkpgqb.rest",nocase; classtype:attempted-recon; sid:200020868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.rytdkra.rest",nocase; classtype:attempted-recon; sid:200020869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.syluojt.rest",nocase; classtype:attempted-recon; sid:200020870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.taemnbb.rest",nocase; classtype:attempted-recon; sid:200020871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.thnoceg.rest",nocase; classtype:attempted-recon; sid:200020872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.tiqrcpl.rest",nocase; classtype:attempted-recon; sid:200020873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.ttniksm.rest",nocase; classtype:attempted-recon; sid:200020874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.uddktyy.rest",nocase; classtype:attempted-recon; sid:200020875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.ukzxens.rest",nocase; classtype:attempted-recon; sid:200020876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.ulztbbb.rest",nocase; classtype:attempted-recon; sid:200020877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.vcobpue.rest",nocase; classtype:attempted-recon; sid:200020878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.vtwwkwu.rest",nocase; classtype:attempted-recon; sid:200020879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.wgkkmrd.rest",nocase; classtype:attempted-recon; sid:200020880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.wokutiv.rest",nocase; classtype:attempted-recon; sid:200020881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.xppqjxo.rest",nocase; classtype:attempted-recon; sid:200020882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.xzstmlr.rest",nocase; classtype:attempted-recon; sid:200020883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.ydtfxhz.rest",nocase; classtype:attempted-recon; sid:200020884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.yvlpjam.rest",nocase; classtype:attempted-recon; sid:200020885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.zbshkeo.rest",nocase; classtype:attempted-recon; sid:200020886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.zikhocp.rest",nocase; classtype:attempted-recon; sid:200020887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.zklwhxa.rest",nocase; classtype:attempted-recon; sid:200020888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.zmwmbck.rest",nocase; classtype:attempted-recon; sid:200020889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viniocure.visorcsiercvxarevi.zugzybw.rest",nocase; classtype:attempted-recon; sid:200020890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-market.7653421.xyz",nocase; classtype:attempted-recon; sid:200020891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.akinami.shop",nocase; classtype:attempted-recon; sid:200020892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.arrowheadbmw.live",nocase; classtype:attempted-recon; sid:200020893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.candy-box.xyz",nocase; classtype:attempted-recon; sid:200020894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.copluk.xyz",nocase; classtype:attempted-recon; sid:200020895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.dingding23.top",nocase; classtype:attempted-recon; sid:200020896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.henglin.top",nocase; classtype:attempted-recon; sid:200020897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.huangyy.xyz",nocase; classtype:attempted-recon; sid:200020898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.itrading.life",nocase; classtype:attempted-recon; sid:200020899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.itsauconyol.top",nocase; classtype:attempted-recon; sid:200020900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.jigao.top",nocase; classtype:attempted-recon; sid:200020901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.kios.top",nocase; classtype:attempted-recon; sid:200020902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.knwldg.xyz",nocase; classtype:attempted-recon; sid:200020903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.lokko.top",nocase; classtype:attempted-recon; sid:200020904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.morvaridpub.shop",nocase; classtype:attempted-recon; sid:200020905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.numaraburda.xyz",nocase; classtype:attempted-recon; sid:200020906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.placasolar.top",nocase; classtype:attempted-recon; sid:200020907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.przewozy.top",nocase; classtype:attempted-recon; sid:200020908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.refpavib.top",nocase; classtype:attempted-recon; sid:200020909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.rueedi.shop",nocase; classtype:attempted-recon; sid:200020910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.sheoriginals.shop",nocase; classtype:attempted-recon; sid:200020911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.unsml.xyz",nocase; classtype:attempted-recon; sid:200020912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted-pl-gj32d.usakbayanescortlar.xyz",nocase; classtype:attempted-recon; sid:200020913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted.id182919.cfd",nocase; classtype:attempted-recon; sid:200020914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted.id308070.cfd",nocase; classtype:attempted-recon; sid:200020915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted.id379134.cfd",nocase; classtype:attempted-recon; sid:200020916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted.id396221.cfd",nocase; classtype:attempted-recon; sid:200020917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted.sprzedaz.me",nocase; classtype:attempted-recon; sid:200020918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vintesd-pln1dellvrs.dostavapndgs6.pl",nocase; classtype:attempted-recon; sid:200020919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vintet-pl-kl2112.trademarks.life",nocase; classtype:attempted-recon; sid:200020920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinteyd-plndellvr.servgktr.shop",nocase; classtype:attempted-recon; sid:200020921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.baflrzt.rest",nocase; classtype:attempted-recon; sid:200020922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.bftggqb.rest",nocase; classtype:attempted-recon; sid:200020923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.bhppmal.rest",nocase; classtype:attempted-recon; sid:200020924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.bkiljbe.rest",nocase; classtype:attempted-recon; sid:200020925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.bwcpfbn.rest",nocase; classtype:attempted-recon; sid:200020926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.cnufsqh.rest",nocase; classtype:attempted-recon; sid:200020927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.ctuhgfk.rest",nocase; classtype:attempted-recon; sid:200020928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.drdsyje.rest",nocase; classtype:attempted-recon; sid:200020929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.dtgskgr.rest",nocase; classtype:attempted-recon; sid:200020930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.dvbkugk.rest",nocase; classtype:attempted-recon; sid:200020931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.dwvwhpm.rest",nocase; classtype:attempted-recon; sid:200020932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.eaplgjq.rest",nocase; classtype:attempted-recon; sid:200020933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.ehsqatn.rest",nocase; classtype:attempted-recon; sid:200020934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.emfeyds.rest",nocase; classtype:attempted-recon; sid:200020935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.fcuccth.rest",nocase; classtype:attempted-recon; sid:200020936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.fikixuj.rest",nocase; classtype:attempted-recon; sid:200020937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.ftpstbj.rest",nocase; classtype:attempted-recon; sid:200020938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.fuivkxa.rest",nocase; classtype:attempted-recon; sid:200020939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.fzjyqpy.rest",nocase; classtype:attempted-recon; sid:200020940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.gemisns.rest",nocase; classtype:attempted-recon; sid:200020941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.ggqugsu.rest",nocase; classtype:attempted-recon; sid:200020942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.gvzoadd.rest",nocase; classtype:attempted-recon; sid:200020943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.gybmzej.rest",nocase; classtype:attempted-recon; sid:200020944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.gywmubl.rest",nocase; classtype:attempted-recon; sid:200020945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.hbzrhor.rest",nocase; classtype:attempted-recon; sid:200020946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.hexttrd.rest",nocase; classtype:attempted-recon; sid:200020947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.hmamatm.rest",nocase; classtype:attempted-recon; sid:200020948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.hqgidqk.rest",nocase; classtype:attempted-recon; sid:200020949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.hymzwrr.rest",nocase; classtype:attempted-recon; sid:200020950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.hynvkvn.rest",nocase; classtype:attempted-recon; sid:200020951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.igsxqxl.rest",nocase; classtype:attempted-recon; sid:200020952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.iktxxwb.rest",nocase; classtype:attempted-recon; sid:200020953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.ipvrmgx.rest",nocase; classtype:attempted-recon; sid:200020954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.iuwqqxo.rest",nocase; classtype:attempted-recon; sid:200020955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.jeseavd.rest",nocase; classtype:attempted-recon; sid:200020956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.jjmxonp.rest",nocase; classtype:attempted-recon; sid:200020957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.kteglik.rest",nocase; classtype:attempted-recon; sid:200020958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.kzoatrc.rest",nocase; classtype:attempted-recon; sid:200020959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.lghbwne.rest",nocase; classtype:attempted-recon; sid:200020960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.lihewoq.rest",nocase; classtype:attempted-recon; sid:200020961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.lmbtnda.rest",nocase; classtype:attempted-recon; sid:200020962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.lmdmaum.rest",nocase; classtype:attempted-recon; sid:200020963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.loszost.rest",nocase; classtype:attempted-recon; sid:200020964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.mbjalki.rest",nocase; classtype:attempted-recon; sid:200020965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.mbwcvge.rest",nocase; classtype:attempted-recon; sid:200020966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.mfbkvgm.rest",nocase; classtype:attempted-recon; sid:200020967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.mrdefgv.rest",nocase; classtype:attempted-recon; sid:200020968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.mrqfkgo.rest",nocase; classtype:attempted-recon; sid:200020969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.mtfamvq.rest",nocase; classtype:attempted-recon; sid:200020970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.needmwo.rest",nocase; classtype:attempted-recon; sid:200020971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.nhqgutl.rest",nocase; classtype:attempted-recon; sid:200020972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.njtawnu.rest",nocase; classtype:attempted-recon; sid:200020973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.nqhviyu.rest",nocase; classtype:attempted-recon; sid:200020974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.ntsckua.rest",nocase; classtype:attempted-recon; sid:200020975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.nulhvqm.rest",nocase; classtype:attempted-recon; sid:200020976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.obfutzz.rest",nocase; classtype:attempted-recon; sid:200020977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.ocsbjyy.rest",nocase; classtype:attempted-recon; sid:200020978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.ogztqfa.rest",nocase; classtype:attempted-recon; sid:200020979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.onggczh.rest",nocase; classtype:attempted-recon; sid:200020980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.ouqcrce.rest",nocase; classtype:attempted-recon; sid:200020981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.ovuydax.rest",nocase; classtype:attempted-recon; sid:200020982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.palxshs.rest",nocase; classtype:attempted-recon; sid:200020983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.pbeozzc.rest",nocase; classtype:attempted-recon; sid:200020984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.pefczzw.rest",nocase; classtype:attempted-recon; sid:200020985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.pfvdgcs.rest",nocase; classtype:attempted-recon; sid:200020986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.poywtcc.rest",nocase; classtype:attempted-recon; sid:200020987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.prcjndo.rest",nocase; classtype:attempted-recon; sid:200020988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.pyamdhg.rest",nocase; classtype:attempted-recon; sid:200020989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.qcgneuj.rest",nocase; classtype:attempted-recon; sid:200020990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.qmvhsgu.rest",nocase; classtype:attempted-recon; sid:200020991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.qthlkxf.rest",nocase; classtype:attempted-recon; sid:200020992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.qtroqhr.rest",nocase; classtype:attempted-recon; sid:200020993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.qwacvnw.rest",nocase; classtype:attempted-recon; sid:200020994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.ranzilm.rest",nocase; classtype:attempted-recon; sid:200020995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.rjwdmhv.rest",nocase; classtype:attempted-recon; sid:200020996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.rkzcxlj.rest",nocase; classtype:attempted-recon; sid:200020997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.rpqqioa.rest",nocase; classtype:attempted-recon; sid:200020998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.rtkpgqb.rest",nocase; classtype:attempted-recon; sid:200020999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.rytdkra.rest",nocase; classtype:attempted-recon; sid:200021000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.syluojt.rest",nocase; classtype:attempted-recon; sid:200021001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.taemnbb.rest",nocase; classtype:attempted-recon; sid:200021002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.thnoceg.rest",nocase; classtype:attempted-recon; sid:200021003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.tiqrcpl.rest",nocase; classtype:attempted-recon; sid:200021004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.ttniksm.rest",nocase; classtype:attempted-recon; sid:200021005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.uddktyy.rest",nocase; classtype:attempted-recon; sid:200021006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.ukzxens.rest",nocase; classtype:attempted-recon; sid:200021007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.ulztbbb.rest",nocase; classtype:attempted-recon; sid:200021008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.vcobpue.rest",nocase; classtype:attempted-recon; sid:200021009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.vtwwkwu.rest",nocase; classtype:attempted-recon; sid:200021010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.wgkkmrd.rest",nocase; classtype:attempted-recon; sid:200021011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.wokutiv.rest",nocase; classtype:attempted-recon; sid:200021012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.xppqjxo.rest",nocase; classtype:attempted-recon; sid:200021013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.xzstmlr.rest",nocase; classtype:attempted-recon; sid:200021014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.ydtfxhz.rest",nocase; classtype:attempted-recon; sid:200021015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.yvlpjam.rest",nocase; classtype:attempted-recon; sid:200021016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.zbshkeo.rest",nocase; classtype:attempted-recon; sid:200021017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.zikhocp.rest",nocase; classtype:attempted-recon; sid:200021018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.zklwhxa.rest",nocase; classtype:attempted-recon; sid:200021019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.zmwmbck.rest",nocase; classtype:attempted-recon; sid:200021020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioerescsnv.vsoersroirevxarevi.zugzybw.rest",nocase; classtype:attempted-recon; sid:200021021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.baflrzt.rest",nocase; classtype:attempted-recon; sid:200021022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.bftggqb.rest",nocase; classtype:attempted-recon; sid:200021023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.bhppmal.rest",nocase; classtype:attempted-recon; sid:200021024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.bkiljbe.rest",nocase; classtype:attempted-recon; sid:200021025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.bwcpfbn.rest",nocase; classtype:attempted-recon; sid:200021026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.cnufsqh.rest",nocase; classtype:attempted-recon; sid:200021027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.ctuhgfk.rest",nocase; classtype:attempted-recon; sid:200021028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.drdsyje.rest",nocase; classtype:attempted-recon; sid:200021029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.dtgskgr.rest",nocase; classtype:attempted-recon; sid:200021030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.dvbkugk.rest",nocase; classtype:attempted-recon; sid:200021031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.dwvwhpm.rest",nocase; classtype:attempted-recon; sid:200021032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.eaplgjq.rest",nocase; classtype:attempted-recon; sid:200021033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.ehsqatn.rest",nocase; classtype:attempted-recon; sid:200021034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.emfeyds.rest",nocase; classtype:attempted-recon; sid:200021035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.fcuccth.rest",nocase; classtype:attempted-recon; sid:200021036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.fikixuj.rest",nocase; classtype:attempted-recon; sid:200021037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.ftpstbj.rest",nocase; classtype:attempted-recon; sid:200021038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.fuivkxa.rest",nocase; classtype:attempted-recon; sid:200021039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.fzjyqpy.rest",nocase; classtype:attempted-recon; sid:200021040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.gemisns.rest",nocase; classtype:attempted-recon; sid:200021041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.ggqugsu.rest",nocase; classtype:attempted-recon; sid:200021042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.gvzoadd.rest",nocase; classtype:attempted-recon; sid:200021043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.gybmzej.rest",nocase; classtype:attempted-recon; sid:200021044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.gywmubl.rest",nocase; classtype:attempted-recon; sid:200021045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.hbzrhor.rest",nocase; classtype:attempted-recon; sid:200021046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.hexttrd.rest",nocase; classtype:attempted-recon; sid:200021047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.hmamatm.rest",nocase; classtype:attempted-recon; sid:200021048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.hqgidqk.rest",nocase; classtype:attempted-recon; sid:200021049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.hymzwrr.rest",nocase; classtype:attempted-recon; sid:200021050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.hynvkvn.rest",nocase; classtype:attempted-recon; sid:200021051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.igsxqxl.rest",nocase; classtype:attempted-recon; sid:200021052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.iktxxwb.rest",nocase; classtype:attempted-recon; sid:200021053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.ipvrmgx.rest",nocase; classtype:attempted-recon; sid:200021054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.iuwqqxo.rest",nocase; classtype:attempted-recon; sid:200021055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.jeseavd.rest",nocase; classtype:attempted-recon; sid:200021056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.jjmxonp.rest",nocase; classtype:attempted-recon; sid:200021057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.kteglik.rest",nocase; classtype:attempted-recon; sid:200021058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.kzoatrc.rest",nocase; classtype:attempted-recon; sid:200021059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.lghbwne.rest",nocase; classtype:attempted-recon; sid:200021060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.lihewoq.rest",nocase; classtype:attempted-recon; sid:200021061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.lmbtnda.rest",nocase; classtype:attempted-recon; sid:200021062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.lmdmaum.rest",nocase; classtype:attempted-recon; sid:200021063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.loszost.rest",nocase; classtype:attempted-recon; sid:200021064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.mbjalki.rest",nocase; classtype:attempted-recon; sid:200021065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.mbwcvge.rest",nocase; classtype:attempted-recon; sid:200021066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.mfbkvgm.rest",nocase; classtype:attempted-recon; sid:200021067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.mrdefgv.rest",nocase; classtype:attempted-recon; sid:200021068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.mrqfkgo.rest",nocase; classtype:attempted-recon; sid:200021069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.mtfamvq.rest",nocase; classtype:attempted-recon; sid:200021070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.needmwo.rest",nocase; classtype:attempted-recon; sid:200021071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.nhqgutl.rest",nocase; classtype:attempted-recon; sid:200021072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.njtawnu.rest",nocase; classtype:attempted-recon; sid:200021073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.nqhviyu.rest",nocase; classtype:attempted-recon; sid:200021074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.ntsckua.rest",nocase; classtype:attempted-recon; sid:200021075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.nulhvqm.rest",nocase; classtype:attempted-recon; sid:200021076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.obfutzz.rest",nocase; classtype:attempted-recon; sid:200021077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.ocsbjyy.rest",nocase; classtype:attempted-recon; sid:200021078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.ogztqfa.rest",nocase; classtype:attempted-recon; sid:200021079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.onggczh.rest",nocase; classtype:attempted-recon; sid:200021080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.ouqcrce.rest",nocase; classtype:attempted-recon; sid:200021081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.ovuydax.rest",nocase; classtype:attempted-recon; sid:200021082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.palxshs.rest",nocase; classtype:attempted-recon; sid:200021083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.pbeozzc.rest",nocase; classtype:attempted-recon; sid:200021084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.pefczzw.rest",nocase; classtype:attempted-recon; sid:200021085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.pfvdgcs.rest",nocase; classtype:attempted-recon; sid:200021086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.poywtcc.rest",nocase; classtype:attempted-recon; sid:200021087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.prcjndo.rest",nocase; classtype:attempted-recon; sid:200021088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.pyamdhg.rest",nocase; classtype:attempted-recon; sid:200021089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.qcgneuj.rest",nocase; classtype:attempted-recon; sid:200021090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.qmvhsgu.rest",nocase; classtype:attempted-recon; sid:200021091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.qthlkxf.rest",nocase; classtype:attempted-recon; sid:200021092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.qtroqhr.rest",nocase; classtype:attempted-recon; sid:200021093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.qwacvnw.rest",nocase; classtype:attempted-recon; sid:200021094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.ranzilm.rest",nocase; classtype:attempted-recon; sid:200021095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.rjwdmhv.rest",nocase; classtype:attempted-recon; sid:200021096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.rkzcxlj.rest",nocase; classtype:attempted-recon; sid:200021097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.rpqqioa.rest",nocase; classtype:attempted-recon; sid:200021098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.rtkpgqb.rest",nocase; classtype:attempted-recon; sid:200021099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.rytdkra.rest",nocase; classtype:attempted-recon; sid:200021100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.syluojt.rest",nocase; classtype:attempted-recon; sid:200021101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.taemnbb.rest",nocase; classtype:attempted-recon; sid:200021102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.thnoceg.rest",nocase; classtype:attempted-recon; sid:200021103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.tiqrcpl.rest",nocase; classtype:attempted-recon; sid:200021104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.ttniksm.rest",nocase; classtype:attempted-recon; sid:200021105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.uddktyy.rest",nocase; classtype:attempted-recon; sid:200021106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.ukzxens.rest",nocase; classtype:attempted-recon; sid:200021107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.ulztbbb.rest",nocase; classtype:attempted-recon; sid:200021108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.vcobpue.rest",nocase; classtype:attempted-recon; sid:200021109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.vtwwkwu.rest",nocase; classtype:attempted-recon; sid:200021110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.wgkkmrd.rest",nocase; classtype:attempted-recon; sid:200021111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.wokutiv.rest",nocase; classtype:attempted-recon; sid:200021112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.xppqjxo.rest",nocase; classtype:attempted-recon; sid:200021113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.xzstmlr.rest",nocase; classtype:attempted-recon; sid:200021114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.ydtfxhz.rest",nocase; classtype:attempted-recon; sid:200021115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.yvlpjam.rest",nocase; classtype:attempted-recon; sid:200021116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.zbshkeo.rest",nocase; classtype:attempted-recon; sid:200021117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.zikhocp.rest",nocase; classtype:attempted-recon; sid:200021118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.zklwhxa.rest",nocase; classtype:attempted-recon; sid:200021119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.zmwmbck.rest",nocase; classtype:attempted-recon; sid:200021120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreorceosnv.vsoersoecsioirescvi.zugzybw.rest",nocase; classtype:attempted-recon; sid:200021121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.baflrzt.rest",nocase; classtype:attempted-recon; sid:200021122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.bftggqb.rest",nocase; classtype:attempted-recon; sid:200021123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.bhppmal.rest",nocase; classtype:attempted-recon; sid:200021124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.bkiljbe.rest",nocase; classtype:attempted-recon; sid:200021125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.bwcpfbn.rest",nocase; classtype:attempted-recon; sid:200021126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.cnufsqh.rest",nocase; classtype:attempted-recon; sid:200021127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.ctuhgfk.rest",nocase; classtype:attempted-recon; sid:200021128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.drdsyje.rest",nocase; classtype:attempted-recon; sid:200021129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.dtgskgr.rest",nocase; classtype:attempted-recon; sid:200021130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.dvbkugk.rest",nocase; classtype:attempted-recon; sid:200021131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.dwvwhpm.rest",nocase; classtype:attempted-recon; sid:200021132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.eaplgjq.rest",nocase; classtype:attempted-recon; sid:200021133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.ehsqatn.rest",nocase; classtype:attempted-recon; sid:200021134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.emfeyds.rest",nocase; classtype:attempted-recon; sid:200021135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.fcuccth.rest",nocase; classtype:attempted-recon; sid:200021136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.fikixuj.rest",nocase; classtype:attempted-recon; sid:200021137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.ftpstbj.rest",nocase; classtype:attempted-recon; sid:200021138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.fuivkxa.rest",nocase; classtype:attempted-recon; sid:200021139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.fzjyqpy.rest",nocase; classtype:attempted-recon; sid:200021140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.gemisns.rest",nocase; classtype:attempted-recon; sid:200021141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.ggqugsu.rest",nocase; classtype:attempted-recon; sid:200021142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.gvzoadd.rest",nocase; classtype:attempted-recon; sid:200021143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.gybmzej.rest",nocase; classtype:attempted-recon; sid:200021144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.gywmubl.rest",nocase; classtype:attempted-recon; sid:200021145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.hbzrhor.rest",nocase; classtype:attempted-recon; sid:200021146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.hexttrd.rest",nocase; classtype:attempted-recon; sid:200021147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.hmamatm.rest",nocase; classtype:attempted-recon; sid:200021148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.hqgidqk.rest",nocase; classtype:attempted-recon; sid:200021149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.hymzwrr.rest",nocase; classtype:attempted-recon; sid:200021150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.hynvkvn.rest",nocase; classtype:attempted-recon; sid:200021151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.igsxqxl.rest",nocase; classtype:attempted-recon; sid:200021152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.iktxxwb.rest",nocase; classtype:attempted-recon; sid:200021153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.ipvrmgx.rest",nocase; classtype:attempted-recon; sid:200021154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.iuwqqxo.rest",nocase; classtype:attempted-recon; sid:200021155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.jeseavd.rest",nocase; classtype:attempted-recon; sid:200021156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.jjmxonp.rest",nocase; classtype:attempted-recon; sid:200021157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.kteglik.rest",nocase; classtype:attempted-recon; sid:200021158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.kzoatrc.rest",nocase; classtype:attempted-recon; sid:200021159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.lghbwne.rest",nocase; classtype:attempted-recon; sid:200021160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.lihewoq.rest",nocase; classtype:attempted-recon; sid:200021161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.lmbtnda.rest",nocase; classtype:attempted-recon; sid:200021162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.lmdmaum.rest",nocase; classtype:attempted-recon; sid:200021163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.loszost.rest",nocase; classtype:attempted-recon; sid:200021164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.mbjalki.rest",nocase; classtype:attempted-recon; sid:200021165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.mbwcvge.rest",nocase; classtype:attempted-recon; sid:200021166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.mfbkvgm.rest",nocase; classtype:attempted-recon; sid:200021167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.mrdefgv.rest",nocase; classtype:attempted-recon; sid:200021168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.mrqfkgo.rest",nocase; classtype:attempted-recon; sid:200021169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.mtfamvq.rest",nocase; classtype:attempted-recon; sid:200021170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.needmwo.rest",nocase; classtype:attempted-recon; sid:200021171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.nhqgutl.rest",nocase; classtype:attempted-recon; sid:200021172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.njtawnu.rest",nocase; classtype:attempted-recon; sid:200021173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.nqhviyu.rest",nocase; classtype:attempted-recon; sid:200021174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.ntsckua.rest",nocase; classtype:attempted-recon; sid:200021175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.nulhvqm.rest",nocase; classtype:attempted-recon; sid:200021176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.obfutzz.rest",nocase; classtype:attempted-recon; sid:200021177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.ocsbjyy.rest",nocase; classtype:attempted-recon; sid:200021178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.ogztqfa.rest",nocase; classtype:attempted-recon; sid:200021179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.onggczh.rest",nocase; classtype:attempted-recon; sid:200021180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.ouqcrce.rest",nocase; classtype:attempted-recon; sid:200021181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.ovuydax.rest",nocase; classtype:attempted-recon; sid:200021182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.palxshs.rest",nocase; classtype:attempted-recon; sid:200021183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.pbeozzc.rest",nocase; classtype:attempted-recon; sid:200021184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.pefczzw.rest",nocase; classtype:attempted-recon; sid:200021185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.pfvdgcs.rest",nocase; classtype:attempted-recon; sid:200021186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.poywtcc.rest",nocase; classtype:attempted-recon; sid:200021187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.prcjndo.rest",nocase; classtype:attempted-recon; sid:200021188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.pyamdhg.rest",nocase; classtype:attempted-recon; sid:200021189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.qcgneuj.rest",nocase; classtype:attempted-recon; sid:200021190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.qmvhsgu.rest",nocase; classtype:attempted-recon; sid:200021191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.qthlkxf.rest",nocase; classtype:attempted-recon; sid:200021192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.qtroqhr.rest",nocase; classtype:attempted-recon; sid:200021193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.qwacvnw.rest",nocase; classtype:attempted-recon; sid:200021194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.ranzilm.rest",nocase; classtype:attempted-recon; sid:200021195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.rjwdmhv.rest",nocase; classtype:attempted-recon; sid:200021196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.rkzcxlj.rest",nocase; classtype:attempted-recon; sid:200021197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.rpqqioa.rest",nocase; classtype:attempted-recon; sid:200021198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.rtkpgqb.rest",nocase; classtype:attempted-recon; sid:200021199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.rytdkra.rest",nocase; classtype:attempted-recon; sid:200021200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.syluojt.rest",nocase; classtype:attempted-recon; sid:200021201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.taemnbb.rest",nocase; classtype:attempted-recon; sid:200021202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.thnoceg.rest",nocase; classtype:attempted-recon; sid:200021203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.tiqrcpl.rest",nocase; classtype:attempted-recon; sid:200021204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.ttniksm.rest",nocase; classtype:attempted-recon; sid:200021205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.uddktyy.rest",nocase; classtype:attempted-recon; sid:200021206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.ukzxens.rest",nocase; classtype:attempted-recon; sid:200021207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.ulztbbb.rest",nocase; classtype:attempted-recon; sid:200021208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.vcobpue.rest",nocase; classtype:attempted-recon; sid:200021209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.vtwwkwu.rest",nocase; classtype:attempted-recon; sid:200021210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.wgkkmrd.rest",nocase; classtype:attempted-recon; sid:200021211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.wokutiv.rest",nocase; classtype:attempted-recon; sid:200021212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.xppqjxo.rest",nocase; classtype:attempted-recon; sid:200021213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.xzstmlr.rest",nocase; classtype:attempted-recon; sid:200021214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.ydtfxhz.rest",nocase; classtype:attempted-recon; sid:200021215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.yvlpjam.rest",nocase; classtype:attempted-recon; sid:200021216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.zbshkeo.rest",nocase; classtype:attempted-recon; sid:200021217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.zikhocp.rest",nocase; classtype:attempted-recon; sid:200021218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.zklwhxa.rest",nocase; classtype:attempted-recon; sid:200021219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.zmwmbck.rest",nocase; classtype:attempted-recon; sid:200021220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesreosnv.vsoersioirescvi.zugzybw.rest",nocase; classtype:attempted-recon; sid:200021221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.baflrzt.rest",nocase; classtype:attempted-recon; sid:200021222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.bftggqb.rest",nocase; classtype:attempted-recon; sid:200021223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.bhppmal.rest",nocase; classtype:attempted-recon; sid:200021224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.bkiljbe.rest",nocase; classtype:attempted-recon; sid:200021225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.bwcpfbn.rest",nocase; classtype:attempted-recon; sid:200021226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.cnufsqh.rest",nocase; classtype:attempted-recon; sid:200021227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.ctuhgfk.rest",nocase; classtype:attempted-recon; sid:200021228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.drdsyje.rest",nocase; classtype:attempted-recon; sid:200021229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.dtgskgr.rest",nocase; classtype:attempted-recon; sid:200021230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.dvbkugk.rest",nocase; classtype:attempted-recon; sid:200021231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.dwvwhpm.rest",nocase; classtype:attempted-recon; sid:200021232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.eaplgjq.rest",nocase; classtype:attempted-recon; sid:200021233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.ehsqatn.rest",nocase; classtype:attempted-recon; sid:200021234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.emfeyds.rest",nocase; classtype:attempted-recon; sid:200021235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.fcuccth.rest",nocase; classtype:attempted-recon; sid:200021236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.fikixuj.rest",nocase; classtype:attempted-recon; sid:200021237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.ftpstbj.rest",nocase; classtype:attempted-recon; sid:200021238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.fuivkxa.rest",nocase; classtype:attempted-recon; sid:200021239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.fzjyqpy.rest",nocase; classtype:attempted-recon; sid:200021240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.gemisns.rest",nocase; classtype:attempted-recon; sid:200021241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.ggqugsu.rest",nocase; classtype:attempted-recon; sid:200021242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.gvzoadd.rest",nocase; classtype:attempted-recon; sid:200021243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.gybmzej.rest",nocase; classtype:attempted-recon; sid:200021244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.gywmubl.rest",nocase; classtype:attempted-recon; sid:200021245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.hbzrhor.rest",nocase; classtype:attempted-recon; sid:200021246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.hexttrd.rest",nocase; classtype:attempted-recon; sid:200021247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.hmamatm.rest",nocase; classtype:attempted-recon; sid:200021248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.hqgidqk.rest",nocase; classtype:attempted-recon; sid:200021249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.hymzwrr.rest",nocase; classtype:attempted-recon; sid:200021250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.hynvkvn.rest",nocase; classtype:attempted-recon; sid:200021251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.igsxqxl.rest",nocase; classtype:attempted-recon; sid:200021252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.iktxxwb.rest",nocase; classtype:attempted-recon; sid:200021253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.ipvrmgx.rest",nocase; classtype:attempted-recon; sid:200021254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.iuwqqxo.rest",nocase; classtype:attempted-recon; sid:200021255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.jeseavd.rest",nocase; classtype:attempted-recon; sid:200021256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.jjmxonp.rest",nocase; classtype:attempted-recon; sid:200021257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.kteglik.rest",nocase; classtype:attempted-recon; sid:200021258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.kzoatrc.rest",nocase; classtype:attempted-recon; sid:200021259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.lghbwne.rest",nocase; classtype:attempted-recon; sid:200021260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.lihewoq.rest",nocase; classtype:attempted-recon; sid:200021261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.lmbtnda.rest",nocase; classtype:attempted-recon; sid:200021262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.lmdmaum.rest",nocase; classtype:attempted-recon; sid:200021263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.loszost.rest",nocase; classtype:attempted-recon; sid:200021264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.mbjalki.rest",nocase; classtype:attempted-recon; sid:200021265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.mbwcvge.rest",nocase; classtype:attempted-recon; sid:200021266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.mfbkvgm.rest",nocase; classtype:attempted-recon; sid:200021267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.mrdefgv.rest",nocase; classtype:attempted-recon; sid:200021268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.mrqfkgo.rest",nocase; classtype:attempted-recon; sid:200021269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.mtfamvq.rest",nocase; classtype:attempted-recon; sid:200021270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.needmwo.rest",nocase; classtype:attempted-recon; sid:200021271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.nhqgutl.rest",nocase; classtype:attempted-recon; sid:200021272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.njtawnu.rest",nocase; classtype:attempted-recon; sid:200021273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.nqhviyu.rest",nocase; classtype:attempted-recon; sid:200021274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.ntsckua.rest",nocase; classtype:attempted-recon; sid:200021275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.nulhvqm.rest",nocase; classtype:attempted-recon; sid:200021276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.obfutzz.rest",nocase; classtype:attempted-recon; sid:200021277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.ocsbjyy.rest",nocase; classtype:attempted-recon; sid:200021278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.ogztqfa.rest",nocase; classtype:attempted-recon; sid:200021279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.onggczh.rest",nocase; classtype:attempted-recon; sid:200021280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.ouqcrce.rest",nocase; classtype:attempted-recon; sid:200021281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.ovuydax.rest",nocase; classtype:attempted-recon; sid:200021282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.palxshs.rest",nocase; classtype:attempted-recon; sid:200021283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.pbeozzc.rest",nocase; classtype:attempted-recon; sid:200021284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.pefczzw.rest",nocase; classtype:attempted-recon; sid:200021285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.pfvdgcs.rest",nocase; classtype:attempted-recon; sid:200021286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.poywtcc.rest",nocase; classtype:attempted-recon; sid:200021287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.prcjndo.rest",nocase; classtype:attempted-recon; sid:200021288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.pyamdhg.rest",nocase; classtype:attempted-recon; sid:200021289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.qcgneuj.rest",nocase; classtype:attempted-recon; sid:200021290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.qmvhsgu.rest",nocase; classtype:attempted-recon; sid:200021291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.qthlkxf.rest",nocase; classtype:attempted-recon; sid:200021292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.qtroqhr.rest",nocase; classtype:attempted-recon; sid:200021293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.qwacvnw.rest",nocase; classtype:attempted-recon; sid:200021294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.ranzilm.rest",nocase; classtype:attempted-recon; sid:200021295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.rjwdmhv.rest",nocase; classtype:attempted-recon; sid:200021296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.rkzcxlj.rest",nocase; classtype:attempted-recon; sid:200021297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.rpqqioa.rest",nocase; classtype:attempted-recon; sid:200021298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.rtkpgqb.rest",nocase; classtype:attempted-recon; sid:200021299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.rytdkra.rest",nocase; classtype:attempted-recon; sid:200021300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.syluojt.rest",nocase; classtype:attempted-recon; sid:200021301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.taemnbb.rest",nocase; classtype:attempted-recon; sid:200021302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.thnoceg.rest",nocase; classtype:attempted-recon; sid:200021303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.tiqrcpl.rest",nocase; classtype:attempted-recon; sid:200021304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.ttniksm.rest",nocase; classtype:attempted-recon; sid:200021305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.uddktyy.rest",nocase; classtype:attempted-recon; sid:200021306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.ukzxens.rest",nocase; classtype:attempted-recon; sid:200021307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.ulztbbb.rest",nocase; classtype:attempted-recon; sid:200021308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.vcobpue.rest",nocase; classtype:attempted-recon; sid:200021309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.vtwwkwu.rest",nocase; classtype:attempted-recon; sid:200021310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.wgkkmrd.rest",nocase; classtype:attempted-recon; sid:200021311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.wokutiv.rest",nocase; classtype:attempted-recon; sid:200021312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.xppqjxo.rest",nocase; classtype:attempted-recon; sid:200021313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.xzstmlr.rest",nocase; classtype:attempted-recon; sid:200021314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.ydtfxhz.rest",nocase; classtype:attempted-recon; sid:200021315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.yvlpjam.rest",nocase; classtype:attempted-recon; sid:200021316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.zbshkeo.rest",nocase; classtype:attempted-recon; sid:200021317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.zikhocp.rest",nocase; classtype:attempted-recon; sid:200021318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.zklwhxa.rest",nocase; classtype:attempted-recon; sid:200021319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.zmwmbck.rest",nocase; classtype:attempted-recon; sid:200021320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrerceosnv.vsoersoecsivxarerescvi.zugzybw.rest",nocase; classtype:attempted-recon; sid:200021321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.baflrzt.rest",nocase; classtype:attempted-recon; sid:200021322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.bftggqb.rest",nocase; classtype:attempted-recon; sid:200021323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.bhppmal.rest",nocase; classtype:attempted-recon; sid:200021324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.bkiljbe.rest",nocase; classtype:attempted-recon; sid:200021325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.bwcpfbn.rest",nocase; classtype:attempted-recon; sid:200021326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.cnufsqh.rest",nocase; classtype:attempted-recon; sid:200021327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.ctuhgfk.rest",nocase; classtype:attempted-recon; sid:200021328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.drdsyje.rest",nocase; classtype:attempted-recon; sid:200021329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.dtgskgr.rest",nocase; classtype:attempted-recon; sid:200021330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.dvbkugk.rest",nocase; classtype:attempted-recon; sid:200021331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.dwvwhpm.rest",nocase; classtype:attempted-recon; sid:200021332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.eaplgjq.rest",nocase; classtype:attempted-recon; sid:200021333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.ehsqatn.rest",nocase; classtype:attempted-recon; sid:200021334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.emfeyds.rest",nocase; classtype:attempted-recon; sid:200021335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.fcuccth.rest",nocase; classtype:attempted-recon; sid:200021336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.fikixuj.rest",nocase; classtype:attempted-recon; sid:200021337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.ftpstbj.rest",nocase; classtype:attempted-recon; sid:200021338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.fuivkxa.rest",nocase; classtype:attempted-recon; sid:200021339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.fzjyqpy.rest",nocase; classtype:attempted-recon; sid:200021340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.gemisns.rest",nocase; classtype:attempted-recon; sid:200021341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.ggqugsu.rest",nocase; classtype:attempted-recon; sid:200021342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.gvzoadd.rest",nocase; classtype:attempted-recon; sid:200021343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.gybmzej.rest",nocase; classtype:attempted-recon; sid:200021344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.gywmubl.rest",nocase; classtype:attempted-recon; sid:200021345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.hbzrhor.rest",nocase; classtype:attempted-recon; sid:200021346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.hexttrd.rest",nocase; classtype:attempted-recon; sid:200021347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.hmamatm.rest",nocase; classtype:attempted-recon; sid:200021348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.hqgidqk.rest",nocase; classtype:attempted-recon; sid:200021349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.hymzwrr.rest",nocase; classtype:attempted-recon; sid:200021350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.hynvkvn.rest",nocase; classtype:attempted-recon; sid:200021351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.igsxqxl.rest",nocase; classtype:attempted-recon; sid:200021352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.iktxxwb.rest",nocase; classtype:attempted-recon; sid:200021353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.ipvrmgx.rest",nocase; classtype:attempted-recon; sid:200021354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.iuwqqxo.rest",nocase; classtype:attempted-recon; sid:200021355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.jeseavd.rest",nocase; classtype:attempted-recon; sid:200021356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.jjmxonp.rest",nocase; classtype:attempted-recon; sid:200021357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.kteglik.rest",nocase; classtype:attempted-recon; sid:200021358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.kzoatrc.rest",nocase; classtype:attempted-recon; sid:200021359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.lghbwne.rest",nocase; classtype:attempted-recon; sid:200021360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.lihewoq.rest",nocase; classtype:attempted-recon; sid:200021361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.lmbtnda.rest",nocase; classtype:attempted-recon; sid:200021362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.lmdmaum.rest",nocase; classtype:attempted-recon; sid:200021363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.loszost.rest",nocase; classtype:attempted-recon; sid:200021364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.mbjalki.rest",nocase; classtype:attempted-recon; sid:200021365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.mbwcvge.rest",nocase; classtype:attempted-recon; sid:200021366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.mfbkvgm.rest",nocase; classtype:attempted-recon; sid:200021367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.mrdefgv.rest",nocase; classtype:attempted-recon; sid:200021368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.mrqfkgo.rest",nocase; classtype:attempted-recon; sid:200021369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.mtfamvq.rest",nocase; classtype:attempted-recon; sid:200021370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.needmwo.rest",nocase; classtype:attempted-recon; sid:200021371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.nhqgutl.rest",nocase; classtype:attempted-recon; sid:200021372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.njtawnu.rest",nocase; classtype:attempted-recon; sid:200021373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.nqhviyu.rest",nocase; classtype:attempted-recon; sid:200021374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.ntsckua.rest",nocase; classtype:attempted-recon; sid:200021375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.nulhvqm.rest",nocase; classtype:attempted-recon; sid:200021376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.obfutzz.rest",nocase; classtype:attempted-recon; sid:200021377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.ocsbjyy.rest",nocase; classtype:attempted-recon; sid:200021378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.ogztqfa.rest",nocase; classtype:attempted-recon; sid:200021379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.onggczh.rest",nocase; classtype:attempted-recon; sid:200021380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.ouqcrce.rest",nocase; classtype:attempted-recon; sid:200021381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.ovuydax.rest",nocase; classtype:attempted-recon; sid:200021382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.palxshs.rest",nocase; classtype:attempted-recon; sid:200021383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.pbeozzc.rest",nocase; classtype:attempted-recon; sid:200021384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.pefczzw.rest",nocase; classtype:attempted-recon; sid:200021385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.pfvdgcs.rest",nocase; classtype:attempted-recon; sid:200021386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.poywtcc.rest",nocase; classtype:attempted-recon; sid:200021387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.prcjndo.rest",nocase; classtype:attempted-recon; sid:200021388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.pyamdhg.rest",nocase; classtype:attempted-recon; sid:200021389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.qcgneuj.rest",nocase; classtype:attempted-recon; sid:200021390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.qmvhsgu.rest",nocase; classtype:attempted-recon; sid:200021391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.qthlkxf.rest",nocase; classtype:attempted-recon; sid:200021392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.qtroqhr.rest",nocase; classtype:attempted-recon; sid:200021393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.qwacvnw.rest",nocase; classtype:attempted-recon; sid:200021394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.ranzilm.rest",nocase; classtype:attempted-recon; sid:200021395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.rjwdmhv.rest",nocase; classtype:attempted-recon; sid:200021396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.rkzcxlj.rest",nocase; classtype:attempted-recon; sid:200021397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.rpqqioa.rest",nocase; classtype:attempted-recon; sid:200021398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.rtkpgqb.rest",nocase; classtype:attempted-recon; sid:200021399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.rytdkra.rest",nocase; classtype:attempted-recon; sid:200021400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.syluojt.rest",nocase; classtype:attempted-recon; sid:200021401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.taemnbb.rest",nocase; classtype:attempted-recon; sid:200021402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.thnoceg.rest",nocase; classtype:attempted-recon; sid:200021403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.tiqrcpl.rest",nocase; classtype:attempted-recon; sid:200021404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.ttniksm.rest",nocase; classtype:attempted-recon; sid:200021405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.uddktyy.rest",nocase; classtype:attempted-recon; sid:200021406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.ukzxens.rest",nocase; classtype:attempted-recon; sid:200021407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.ulztbbb.rest",nocase; classtype:attempted-recon; sid:200021408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.vcobpue.rest",nocase; classtype:attempted-recon; sid:200021409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.vtwwkwu.rest",nocase; classtype:attempted-recon; sid:200021410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.wgkkmrd.rest",nocase; classtype:attempted-recon; sid:200021411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.wokutiv.rest",nocase; classtype:attempted-recon; sid:200021412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.xppqjxo.rest",nocase; classtype:attempted-recon; sid:200021413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.xzstmlr.rest",nocase; classtype:attempted-recon; sid:200021414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.ydtfxhz.rest",nocase; classtype:attempted-recon; sid:200021415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.yvlpjam.rest",nocase; classtype:attempted-recon; sid:200021416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.zbshkeo.rest",nocase; classtype:attempted-recon; sid:200021417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.zikhocp.rest",nocase; classtype:attempted-recon; sid:200021418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.zklwhxa.rest",nocase; classtype:attempted-recon; sid:200021419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.zmwmbck.rest",nocase; classtype:attempted-recon; sid:200021420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesrescsnv.vsoersroirescvi.zugzybw.rest",nocase; classtype:attempted-recon; sid:200021421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.baflrzt.rest",nocase; classtype:attempted-recon; sid:200021422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.bftggqb.rest",nocase; classtype:attempted-recon; sid:200021423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.bhppmal.rest",nocase; classtype:attempted-recon; sid:200021424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.bkiljbe.rest",nocase; classtype:attempted-recon; sid:200021425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.bwcpfbn.rest",nocase; classtype:attempted-recon; sid:200021426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.cnufsqh.rest",nocase; classtype:attempted-recon; sid:200021427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.ctuhgfk.rest",nocase; classtype:attempted-recon; sid:200021428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.drdsyje.rest",nocase; classtype:attempted-recon; sid:200021429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.dtgskgr.rest",nocase; classtype:attempted-recon; sid:200021430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.dvbkugk.rest",nocase; classtype:attempted-recon; sid:200021431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.dwvwhpm.rest",nocase; classtype:attempted-recon; sid:200021432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.eaplgjq.rest",nocase; classtype:attempted-recon; sid:200021433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.ehsqatn.rest",nocase; classtype:attempted-recon; sid:200021434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.emfeyds.rest",nocase; classtype:attempted-recon; sid:200021435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.fcuccth.rest",nocase; classtype:attempted-recon; sid:200021436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.fikixuj.rest",nocase; classtype:attempted-recon; sid:200021437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.ftpstbj.rest",nocase; classtype:attempted-recon; sid:200021438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.fuivkxa.rest",nocase; classtype:attempted-recon; sid:200021439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.fzjyqpy.rest",nocase; classtype:attempted-recon; sid:200021440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.gemisns.rest",nocase; classtype:attempted-recon; sid:200021441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.ggqugsu.rest",nocase; classtype:attempted-recon; sid:200021442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.gvzoadd.rest",nocase; classtype:attempted-recon; sid:200021443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.gybmzej.rest",nocase; classtype:attempted-recon; sid:200021444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.gywmubl.rest",nocase; classtype:attempted-recon; sid:200021445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.hbzrhor.rest",nocase; classtype:attempted-recon; sid:200021446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.hexttrd.rest",nocase; classtype:attempted-recon; sid:200021447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.hmamatm.rest",nocase; classtype:attempted-recon; sid:200021448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.hqgidqk.rest",nocase; classtype:attempted-recon; sid:200021449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.hymzwrr.rest",nocase; classtype:attempted-recon; sid:200021450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.hynvkvn.rest",nocase; classtype:attempted-recon; sid:200021451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.igsxqxl.rest",nocase; classtype:attempted-recon; sid:200021452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.iktxxwb.rest",nocase; classtype:attempted-recon; sid:200021453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.ipvrmgx.rest",nocase; classtype:attempted-recon; sid:200021454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.iuwqqxo.rest",nocase; classtype:attempted-recon; sid:200021455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.jeseavd.rest",nocase; classtype:attempted-recon; sid:200021456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.jjmxonp.rest",nocase; classtype:attempted-recon; sid:200021457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.kteglik.rest",nocase; classtype:attempted-recon; sid:200021458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.kzoatrc.rest",nocase; classtype:attempted-recon; sid:200021459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.lghbwne.rest",nocase; classtype:attempted-recon; sid:200021460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.lihewoq.rest",nocase; classtype:attempted-recon; sid:200021461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.lmbtnda.rest",nocase; classtype:attempted-recon; sid:200021462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.lmdmaum.rest",nocase; classtype:attempted-recon; sid:200021463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.loszost.rest",nocase; classtype:attempted-recon; sid:200021464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.mbjalki.rest",nocase; classtype:attempted-recon; sid:200021465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.mbwcvge.rest",nocase; classtype:attempted-recon; sid:200021466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.mfbkvgm.rest",nocase; classtype:attempted-recon; sid:200021467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.mrdefgv.rest",nocase; classtype:attempted-recon; sid:200021468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.mrqfkgo.rest",nocase; classtype:attempted-recon; sid:200021469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.mtfamvq.rest",nocase; classtype:attempted-recon; sid:200021470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.needmwo.rest",nocase; classtype:attempted-recon; sid:200021471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.nhqgutl.rest",nocase; classtype:attempted-recon; sid:200021472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.njtawnu.rest",nocase; classtype:attempted-recon; sid:200021473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.nqhviyu.rest",nocase; classtype:attempted-recon; sid:200021474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.ntsckua.rest",nocase; classtype:attempted-recon; sid:200021475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.nulhvqm.rest",nocase; classtype:attempted-recon; sid:200021476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.obfutzz.rest",nocase; classtype:attempted-recon; sid:200021477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.ocsbjyy.rest",nocase; classtype:attempted-recon; sid:200021478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.ogztqfa.rest",nocase; classtype:attempted-recon; sid:200021479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.onggczh.rest",nocase; classtype:attempted-recon; sid:200021480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.ouqcrce.rest",nocase; classtype:attempted-recon; sid:200021481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.ovuydax.rest",nocase; classtype:attempted-recon; sid:200021482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.palxshs.rest",nocase; classtype:attempted-recon; sid:200021483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.pbeozzc.rest",nocase; classtype:attempted-recon; sid:200021484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.pefczzw.rest",nocase; classtype:attempted-recon; sid:200021485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.pfvdgcs.rest",nocase; classtype:attempted-recon; sid:200021486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.poywtcc.rest",nocase; classtype:attempted-recon; sid:200021487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.prcjndo.rest",nocase; classtype:attempted-recon; sid:200021488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.pyamdhg.rest",nocase; classtype:attempted-recon; sid:200021489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.qcgneuj.rest",nocase; classtype:attempted-recon; sid:200021490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.qmvhsgu.rest",nocase; classtype:attempted-recon; sid:200021491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.qthlkxf.rest",nocase; classtype:attempted-recon; sid:200021492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.qtroqhr.rest",nocase; classtype:attempted-recon; sid:200021493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.qwacvnw.rest",nocase; classtype:attempted-recon; sid:200021494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.ranzilm.rest",nocase; classtype:attempted-recon; sid:200021495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.rjwdmhv.rest",nocase; classtype:attempted-recon; sid:200021496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.rkzcxlj.rest",nocase; classtype:attempted-recon; sid:200021497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.rpqqioa.rest",nocase; classtype:attempted-recon; sid:200021498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.rtkpgqb.rest",nocase; classtype:attempted-recon; sid:200021499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.rytdkra.rest",nocase; classtype:attempted-recon; sid:200021500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.syluojt.rest",nocase; classtype:attempted-recon; sid:200021501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.taemnbb.rest",nocase; classtype:attempted-recon; sid:200021502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.thnoceg.rest",nocase; classtype:attempted-recon; sid:200021503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.tiqrcpl.rest",nocase; classtype:attempted-recon; sid:200021504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.ttniksm.rest",nocase; classtype:attempted-recon; sid:200021505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.uddktyy.rest",nocase; classtype:attempted-recon; sid:200021506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.ukzxens.rest",nocase; classtype:attempted-recon; sid:200021507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.ulztbbb.rest",nocase; classtype:attempted-recon; sid:200021508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.vcobpue.rest",nocase; classtype:attempted-recon; sid:200021509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.vtwwkwu.rest",nocase; classtype:attempted-recon; sid:200021510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.wgkkmrd.rest",nocase; classtype:attempted-recon; sid:200021511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.wokutiv.rest",nocase; classtype:attempted-recon; sid:200021512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.xppqjxo.rest",nocase; classtype:attempted-recon; sid:200021513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.xzstmlr.rest",nocase; classtype:attempted-recon; sid:200021514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.ydtfxhz.rest",nocase; classtype:attempted-recon; sid:200021515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.yvlpjam.rest",nocase; classtype:attempted-recon; sid:200021516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.zbshkeo.rest",nocase; classtype:attempted-recon; sid:200021517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.zikhocp.rest",nocase; classtype:attempted-recon; sid:200021518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.zklwhxa.rest",nocase; classtype:attempted-recon; sid:200021519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.zmwmbck.rest",nocase; classtype:attempted-recon; sid:200021520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresorcecsnv.vsoersoecsroirescvi.zugzybw.rest",nocase; classtype:attempted-recon; sid:200021521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.baflrzt.rest",nocase; classtype:attempted-recon; sid:200021522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.bftggqb.rest",nocase; classtype:attempted-recon; sid:200021523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.bhppmal.rest",nocase; classtype:attempted-recon; sid:200021524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.bkiljbe.rest",nocase; classtype:attempted-recon; sid:200021525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.bwcpfbn.rest",nocase; classtype:attempted-recon; sid:200021526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.cnufsqh.rest",nocase; classtype:attempted-recon; sid:200021527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.ctuhgfk.rest",nocase; classtype:attempted-recon; sid:200021528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.drdsyje.rest",nocase; classtype:attempted-recon; sid:200021529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.dtgskgr.rest",nocase; classtype:attempted-recon; sid:200021530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.dvbkugk.rest",nocase; classtype:attempted-recon; sid:200021531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.dwvwhpm.rest",nocase; classtype:attempted-recon; sid:200021532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.eaplgjq.rest",nocase; classtype:attempted-recon; sid:200021533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.ehsqatn.rest",nocase; classtype:attempted-recon; sid:200021534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.emfeyds.rest",nocase; classtype:attempted-recon; sid:200021535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.fcuccth.rest",nocase; classtype:attempted-recon; sid:200021536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.fikixuj.rest",nocase; classtype:attempted-recon; sid:200021537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.ftpstbj.rest",nocase; classtype:attempted-recon; sid:200021538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.fuivkxa.rest",nocase; classtype:attempted-recon; sid:200021539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.fzjyqpy.rest",nocase; classtype:attempted-recon; sid:200021540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.gemisns.rest",nocase; classtype:attempted-recon; sid:200021541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.ggqugsu.rest",nocase; classtype:attempted-recon; sid:200021542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.gvzoadd.rest",nocase; classtype:attempted-recon; sid:200021543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.gybmzej.rest",nocase; classtype:attempted-recon; sid:200021544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.gywmubl.rest",nocase; classtype:attempted-recon; sid:200021545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.hbzrhor.rest",nocase; classtype:attempted-recon; sid:200021546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.hexttrd.rest",nocase; classtype:attempted-recon; sid:200021547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.hmamatm.rest",nocase; classtype:attempted-recon; sid:200021548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.hqgidqk.rest",nocase; classtype:attempted-recon; sid:200021549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.hymzwrr.rest",nocase; classtype:attempted-recon; sid:200021550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.hynvkvn.rest",nocase; classtype:attempted-recon; sid:200021551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.igsxqxl.rest",nocase; classtype:attempted-recon; sid:200021552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.iktxxwb.rest",nocase; classtype:attempted-recon; sid:200021553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.ipvrmgx.rest",nocase; classtype:attempted-recon; sid:200021554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.iuwqqxo.rest",nocase; classtype:attempted-recon; sid:200021555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.jeseavd.rest",nocase; classtype:attempted-recon; sid:200021556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.jjmxonp.rest",nocase; classtype:attempted-recon; sid:200021557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.kteglik.rest",nocase; classtype:attempted-recon; sid:200021558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.kzoatrc.rest",nocase; classtype:attempted-recon; sid:200021559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.lghbwne.rest",nocase; classtype:attempted-recon; sid:200021560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.lihewoq.rest",nocase; classtype:attempted-recon; sid:200021561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.lmbtnda.rest",nocase; classtype:attempted-recon; sid:200021562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.lmdmaum.rest",nocase; classtype:attempted-recon; sid:200021563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.loszost.rest",nocase; classtype:attempted-recon; sid:200021564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.mbjalki.rest",nocase; classtype:attempted-recon; sid:200021565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.mbwcvge.rest",nocase; classtype:attempted-recon; sid:200021566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.mfbkvgm.rest",nocase; classtype:attempted-recon; sid:200021567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.mrdefgv.rest",nocase; classtype:attempted-recon; sid:200021568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.mrqfkgo.rest",nocase; classtype:attempted-recon; sid:200021569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.mtfamvq.rest",nocase; classtype:attempted-recon; sid:200021570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.needmwo.rest",nocase; classtype:attempted-recon; sid:200021571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.nhqgutl.rest",nocase; classtype:attempted-recon; sid:200021572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.njtawnu.rest",nocase; classtype:attempted-recon; sid:200021573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.nqhviyu.rest",nocase; classtype:attempted-recon; sid:200021574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.ntsckua.rest",nocase; classtype:attempted-recon; sid:200021575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.nulhvqm.rest",nocase; classtype:attempted-recon; sid:200021576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.obfutzz.rest",nocase; classtype:attempted-recon; sid:200021577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.ocsbjyy.rest",nocase; classtype:attempted-recon; sid:200021578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.ogztqfa.rest",nocase; classtype:attempted-recon; sid:200021579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.onggczh.rest",nocase; classtype:attempted-recon; sid:200021580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.ouqcrce.rest",nocase; classtype:attempted-recon; sid:200021581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.ovuydax.rest",nocase; classtype:attempted-recon; sid:200021582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.palxshs.rest",nocase; classtype:attempted-recon; sid:200021583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.pbeozzc.rest",nocase; classtype:attempted-recon; sid:200021584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.pefczzw.rest",nocase; classtype:attempted-recon; sid:200021585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.pfvdgcs.rest",nocase; classtype:attempted-recon; sid:200021586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.poywtcc.rest",nocase; classtype:attempted-recon; sid:200021587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.prcjndo.rest",nocase; classtype:attempted-recon; sid:200021588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.pyamdhg.rest",nocase; classtype:attempted-recon; sid:200021589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.qcgneuj.rest",nocase; classtype:attempted-recon; sid:200021590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.qmvhsgu.rest",nocase; classtype:attempted-recon; sid:200021591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.qthlkxf.rest",nocase; classtype:attempted-recon; sid:200021592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.qtroqhr.rest",nocase; classtype:attempted-recon; sid:200021593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.qwacvnw.rest",nocase; classtype:attempted-recon; sid:200021594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.ranzilm.rest",nocase; classtype:attempted-recon; sid:200021595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.rjwdmhv.rest",nocase; classtype:attempted-recon; sid:200021596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.rkzcxlj.rest",nocase; classtype:attempted-recon; sid:200021597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.rpqqioa.rest",nocase; classtype:attempted-recon; sid:200021598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.rtkpgqb.rest",nocase; classtype:attempted-recon; sid:200021599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.rytdkra.rest",nocase; classtype:attempted-recon; sid:200021600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.syluojt.rest",nocase; classtype:attempted-recon; sid:200021601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.taemnbb.rest",nocase; classtype:attempted-recon; sid:200021602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.thnoceg.rest",nocase; classtype:attempted-recon; sid:200021603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.tiqrcpl.rest",nocase; classtype:attempted-recon; sid:200021604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.ttniksm.rest",nocase; classtype:attempted-recon; sid:200021605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.uddktyy.rest",nocase; classtype:attempted-recon; sid:200021606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.ukzxens.rest",nocase; classtype:attempted-recon; sid:200021607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.ulztbbb.rest",nocase; classtype:attempted-recon; sid:200021608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.vcobpue.rest",nocase; classtype:attempted-recon; sid:200021609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.vtwwkwu.rest",nocase; classtype:attempted-recon; sid:200021610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.wgkkmrd.rest",nocase; classtype:attempted-recon; sid:200021611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.wokutiv.rest",nocase; classtype:attempted-recon; sid:200021612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.xppqjxo.rest",nocase; classtype:attempted-recon; sid:200021613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.xzstmlr.rest",nocase; classtype:attempted-recon; sid:200021614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.ydtfxhz.rest",nocase; classtype:attempted-recon; sid:200021615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.yvlpjam.rest",nocase; classtype:attempted-recon; sid:200021616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.zbshkeo.rest",nocase; classtype:attempted-recon; sid:200021617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.zikhocp.rest",nocase; classtype:attempted-recon; sid:200021618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.zklwhxa.rest",nocase; classtype:attempted-recon; sid:200021619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.zmwmbck.rest",nocase; classtype:attempted-recon; sid:200021620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioesresrcecsnv.vsoersoecsrvxarerescvi.zugzybw.rest",nocase; classtype:attempted-recon; sid:200021621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.accunn.id",nocase; classtype:attempted-recon; sid:200021622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.arowal.id",nocase; classtype:attempted-recon; sid:200021623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.asciqo.id",nocase; classtype:attempted-recon; sid:200021624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.bomgwz.id",nocase; classtype:attempted-recon; sid:200021625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.bypiqw.id",nocase; classtype:attempted-recon; sid:200021626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.ciuwoo.id",nocase; classtype:attempted-recon; sid:200021627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.cmoqdm.id",nocase; classtype:attempted-recon; sid:200021628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.cufjaj.id",nocase; classtype:attempted-recon; sid:200021629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.czaoxt.id",nocase; classtype:attempted-recon; sid:200021630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.eaezlo.id",nocase; classtype:attempted-recon; sid:200021631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.egrhtq.id",nocase; classtype:attempted-recon; sid:200021632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.eickib.id",nocase; classtype:attempted-recon; sid:200021633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.epcyai.id",nocase; classtype:attempted-recon; sid:200021634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.fjfuni.id",nocase; classtype:attempted-recon; sid:200021635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.fkbwav.id",nocase; classtype:attempted-recon; sid:200021636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.gbaluw.id",nocase; classtype:attempted-recon; sid:200021637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.gkaxhu.id",nocase; classtype:attempted-recon; sid:200021638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.gpaqia.id",nocase; classtype:attempted-recon; sid:200021639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.gykmlg.id",nocase; classtype:attempted-recon; sid:200021640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.gyyiwk.id",nocase; classtype:attempted-recon; sid:200021641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.hbzhrq.id",nocase; classtype:attempted-recon; sid:200021642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.hilrzx.id",nocase; classtype:attempted-recon; sid:200021643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.hloymq.id",nocase; classtype:attempted-recon; sid:200021644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.hqnjab.id",nocase; classtype:attempted-recon; sid:200021645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.iclxtv.id",nocase; classtype:attempted-recon; sid:200021646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.iikuie.id",nocase; classtype:attempted-recon; sid:200021647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.jlxkma.id",nocase; classtype:attempted-recon; sid:200021648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.jqlcwt.id",nocase; classtype:attempted-recon; sid:200021649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.jvahcx.id",nocase; classtype:attempted-recon; sid:200021650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.jzuxde.id",nocase; classtype:attempted-recon; sid:200021651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.khlzjd.id",nocase; classtype:attempted-recon; sid:200021652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.krxqdo.id",nocase; classtype:attempted-recon; sid:200021653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.ksbgin.id",nocase; classtype:attempted-recon; sid:200021654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.lndzay.id",nocase; classtype:attempted-recon; sid:200021655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.lxxdeq.id",nocase; classtype:attempted-recon; sid:200021656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.lyiqnd.id",nocase; classtype:attempted-recon; sid:200021657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.lyxyuf.id",nocase; classtype:attempted-recon; sid:200021658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.mbjhhd.id",nocase; classtype:attempted-recon; sid:200021659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.mhlvfi.id",nocase; classtype:attempted-recon; sid:200021660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.mifikv.id",nocase; classtype:attempted-recon; sid:200021661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.mqvjkr.id",nocase; classtype:attempted-recon; sid:200021662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.mrinog.id",nocase; classtype:attempted-recon; sid:200021663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.nbzllz.id",nocase; classtype:attempted-recon; sid:200021664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.nsyflm.id",nocase; classtype:attempted-recon; sid:200021665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.ntdght.id",nocase; classtype:attempted-recon; sid:200021666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.ovpzzh.id",nocase; classtype:attempted-recon; sid:200021667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.pdzcxc.id",nocase; classtype:attempted-recon; sid:200021668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.podujg.id",nocase; classtype:attempted-recon; sid:200021669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.pvqbdr.id",nocase; classtype:attempted-recon; sid:200021670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.qigfcj.id",nocase; classtype:attempted-recon; sid:200021671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.rdinpk.id",nocase; classtype:attempted-recon; sid:200021672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.rqrpjt.id",nocase; classtype:attempted-recon; sid:200021673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.rzyssw.id",nocase; classtype:attempted-recon; sid:200021674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.sfqlok.id",nocase; classtype:attempted-recon; sid:200021675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.ukpvop.id",nocase; classtype:attempted-recon; sid:200021676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.upblku.id",nocase; classtype:attempted-recon; sid:200021677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.uuppfm.id",nocase; classtype:attempted-recon; sid:200021678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.wfzola.id",nocase; classtype:attempted-recon; sid:200021679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.wgkngu.id",nocase; classtype:attempted-recon; sid:200021680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.whdeeh.id",nocase; classtype:attempted-recon; sid:200021681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.xkpjpw.id",nocase; classtype:attempted-recon; sid:200021682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.xqjgyc.id",nocase; classtype:attempted-recon; sid:200021683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.xutdbc.id",nocase; classtype:attempted-recon; sid:200021684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.yabztv.id",nocase; classtype:attempted-recon; sid:200021685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.yvzlne.id",nocase; classtype:attempted-recon; sid:200021686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.zcyttz.id",nocase; classtype:attempted-recon; sid:200021687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.zdknwh.id",nocase; classtype:attempted-recon; sid:200021688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.ziehxi.id",nocase; classtype:attempted-recon; sid:200021689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.zkxahi.id",nocase; classtype:attempted-recon; sid:200021690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.zmjezy.id",nocase; classtype:attempted-recon; sid:200021691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.zuaswx.id",nocase; classtype:attempted-recon; sid:200021692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.accunn.id",nocase; classtype:attempted-recon; sid:200021693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.arowal.id",nocase; classtype:attempted-recon; sid:200021694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.asciqo.id",nocase; classtype:attempted-recon; sid:200021695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.bomgwz.id",nocase; classtype:attempted-recon; sid:200021696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.bypiqw.id",nocase; classtype:attempted-recon; sid:200021697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.ciuwoo.id",nocase; classtype:attempted-recon; sid:200021698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.cmoqdm.id",nocase; classtype:attempted-recon; sid:200021699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.cufjaj.id",nocase; classtype:attempted-recon; sid:200021700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.czaoxt.id",nocase; classtype:attempted-recon; sid:200021701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.eaezlo.id",nocase; classtype:attempted-recon; sid:200021702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.egrhtq.id",nocase; classtype:attempted-recon; sid:200021703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.eickib.id",nocase; classtype:attempted-recon; sid:200021704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.epcyai.id",nocase; classtype:attempted-recon; sid:200021705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.fdtieg.id",nocase; classtype:attempted-recon; sid:200021706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.fjfuni.id",nocase; classtype:attempted-recon; sid:200021707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.fkbwav.id",nocase; classtype:attempted-recon; sid:200021708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.gbaluw.id",nocase; classtype:attempted-recon; sid:200021709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.gkaxhu.id",nocase; classtype:attempted-recon; sid:200021710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.gpaqia.id",nocase; classtype:attempted-recon; sid:200021711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.gykmlg.id",nocase; classtype:attempted-recon; sid:200021712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.gyyiwk.id",nocase; classtype:attempted-recon; sid:200021713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.hbzhrq.id",nocase; classtype:attempted-recon; sid:200021714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.hilrzx.id",nocase; classtype:attempted-recon; sid:200021715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.hloymq.id",nocase; classtype:attempted-recon; sid:200021716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.hqnjab.id",nocase; classtype:attempted-recon; sid:200021717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.iclxtv.id",nocase; classtype:attempted-recon; sid:200021718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.iikuie.id",nocase; classtype:attempted-recon; sid:200021719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.jlxkma.id",nocase; classtype:attempted-recon; sid:200021720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.jqlcwt.id",nocase; classtype:attempted-recon; sid:200021721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.jvahcx.id",nocase; classtype:attempted-recon; sid:200021722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.jzuxde.id",nocase; classtype:attempted-recon; sid:200021723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.khlzjd.id",nocase; classtype:attempted-recon; sid:200021724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.krxqdo.id",nocase; classtype:attempted-recon; sid:200021725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.ksbgin.id",nocase; classtype:attempted-recon; sid:200021726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.lndzay.id",nocase; classtype:attempted-recon; sid:200021727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.lxxdeq.id",nocase; classtype:attempted-recon; sid:200021728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.lyiqnd.id",nocase; classtype:attempted-recon; sid:200021729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.lyxyuf.id",nocase; classtype:attempted-recon; sid:200021730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.mbjhhd.id",nocase; classtype:attempted-recon; sid:200021731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.mhlvfi.id",nocase; classtype:attempted-recon; sid:200021732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.mifikv.id",nocase; classtype:attempted-recon; sid:200021733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.mqvjkr.id",nocase; classtype:attempted-recon; sid:200021734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.mrinog.id",nocase; classtype:attempted-recon; sid:200021735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.nbzllz.id",nocase; classtype:attempted-recon; sid:200021736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.nsyflm.id",nocase; classtype:attempted-recon; sid:200021737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.ntdght.id",nocase; classtype:attempted-recon; sid:200021738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.ovpzzh.id",nocase; classtype:attempted-recon; sid:200021739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.pdzcxc.id",nocase; classtype:attempted-recon; sid:200021740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.podujg.id",nocase; classtype:attempted-recon; sid:200021741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.pvqbdr.id",nocase; classtype:attempted-recon; sid:200021742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.qigfcj.id",nocase; classtype:attempted-recon; sid:200021743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.rdinpk.id",nocase; classtype:attempted-recon; sid:200021744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.rqrpjt.id",nocase; classtype:attempted-recon; sid:200021745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.rzyssw.id",nocase; classtype:attempted-recon; sid:200021746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.sfqlok.id",nocase; classtype:attempted-recon; sid:200021747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.ukpvop.id",nocase; classtype:attempted-recon; sid:200021748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.upblku.id",nocase; classtype:attempted-recon; sid:200021749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.uuppfm.id",nocase; classtype:attempted-recon; sid:200021750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.wfzola.id",nocase; classtype:attempted-recon; sid:200021751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.wgkngu.id",nocase; classtype:attempted-recon; sid:200021752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.whdeeh.id",nocase; classtype:attempted-recon; sid:200021753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.xkpjpw.id",nocase; classtype:attempted-recon; sid:200021754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.xqjgyc.id",nocase; classtype:attempted-recon; sid:200021755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.xutdbc.id",nocase; classtype:attempted-recon; sid:200021756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.yabztv.id",nocase; classtype:attempted-recon; sid:200021757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.yvzlne.id",nocase; classtype:attempted-recon; sid:200021758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.zcyttz.id",nocase; classtype:attempted-recon; sid:200021759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.zdknwh.id",nocase; classtype:attempted-recon; sid:200021760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.ziehxi.id",nocase; classtype:attempted-recon; sid:200021761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.zkxahi.id",nocase; classtype:attempted-recon; sid:200021762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.zmjezy.id",nocase; classtype:attempted-recon; sid:200021763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.zuaswx.id",nocase; classtype:attempted-recon; sid:200021764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.accunn.id",nocase; classtype:attempted-recon; sid:200021765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.arowal.id",nocase; classtype:attempted-recon; sid:200021766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.asciqo.id",nocase; classtype:attempted-recon; sid:200021767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.bomgwz.id",nocase; classtype:attempted-recon; sid:200021768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.bypiqw.id",nocase; classtype:attempted-recon; sid:200021769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.ciuwoo.id",nocase; classtype:attempted-recon; sid:200021770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.cmoqdm.id",nocase; classtype:attempted-recon; sid:200021771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.cufjaj.id",nocase; classtype:attempted-recon; sid:200021772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.czaoxt.id",nocase; classtype:attempted-recon; sid:200021773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.eaezlo.id",nocase; classtype:attempted-recon; sid:200021774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.egrhtq.id",nocase; classtype:attempted-recon; sid:200021775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.eickib.id",nocase; classtype:attempted-recon; sid:200021776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.epcyai.id",nocase; classtype:attempted-recon; sid:200021777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.fdtieg.id",nocase; classtype:attempted-recon; sid:200021778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.fjfuni.id",nocase; classtype:attempted-recon; sid:200021779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.fkbwav.id",nocase; classtype:attempted-recon; sid:200021780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.gbaluw.id",nocase; classtype:attempted-recon; sid:200021781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.gkaxhu.id",nocase; classtype:attempted-recon; sid:200021782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.gpaqia.id",nocase; classtype:attempted-recon; sid:200021783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.gykmlg.id",nocase; classtype:attempted-recon; sid:200021784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.gyyiwk.id",nocase; classtype:attempted-recon; sid:200021785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.hbzhrq.id",nocase; classtype:attempted-recon; sid:200021786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.hilrzx.id",nocase; classtype:attempted-recon; sid:200021787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.hloymq.id",nocase; classtype:attempted-recon; sid:200021788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.hqnjab.id",nocase; classtype:attempted-recon; sid:200021789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.iclxtv.id",nocase; classtype:attempted-recon; sid:200021790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.iikuie.id",nocase; classtype:attempted-recon; sid:200021791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.jlxkma.id",nocase; classtype:attempted-recon; sid:200021792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.jqlcwt.id",nocase; classtype:attempted-recon; sid:200021793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.jvahcx.id",nocase; classtype:attempted-recon; sid:200021794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.jzuxde.id",nocase; classtype:attempted-recon; sid:200021795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.khlzjd.id",nocase; classtype:attempted-recon; sid:200021796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.krxqdo.id",nocase; classtype:attempted-recon; sid:200021797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.ksbgin.id",nocase; classtype:attempted-recon; sid:200021798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.lndzay.id",nocase; classtype:attempted-recon; sid:200021799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.lxxdeq.id",nocase; classtype:attempted-recon; sid:200021800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.lyiqnd.id",nocase; classtype:attempted-recon; sid:200021801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.lyxyuf.id",nocase; classtype:attempted-recon; sid:200021802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.mbjhhd.id",nocase; classtype:attempted-recon; sid:200021803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.mhlvfi.id",nocase; classtype:attempted-recon; sid:200021804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.mifikv.id",nocase; classtype:attempted-recon; sid:200021805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.mqvjkr.id",nocase; classtype:attempted-recon; sid:200021806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.mrinog.id",nocase; classtype:attempted-recon; sid:200021807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.nbzllz.id",nocase; classtype:attempted-recon; sid:200021808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.nsyflm.id",nocase; classtype:attempted-recon; sid:200021809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.ntdght.id",nocase; classtype:attempted-recon; sid:200021810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.ovpzzh.id",nocase; classtype:attempted-recon; sid:200021811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.pdzcxc.id",nocase; classtype:attempted-recon; sid:200021812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.podujg.id",nocase; classtype:attempted-recon; sid:200021813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.pvqbdr.id",nocase; classtype:attempted-recon; sid:200021814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.qigfcj.id",nocase; classtype:attempted-recon; sid:200021815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.rdinpk.id",nocase; classtype:attempted-recon; sid:200021816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.rqrpjt.id",nocase; classtype:attempted-recon; sid:200021817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.rzyssw.id",nocase; classtype:attempted-recon; sid:200021818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.sfqlok.id",nocase; classtype:attempted-recon; sid:200021819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.ukpvop.id",nocase; classtype:attempted-recon; sid:200021820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.upblku.id",nocase; classtype:attempted-recon; sid:200021821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.uuppfm.id",nocase; classtype:attempted-recon; sid:200021822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.wfzola.id",nocase; classtype:attempted-recon; sid:200021823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.wgkngu.id",nocase; classtype:attempted-recon; sid:200021824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.whdeeh.id",nocase; classtype:attempted-recon; sid:200021825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.xkpjpw.id",nocase; classtype:attempted-recon; sid:200021826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.xqjgyc.id",nocase; classtype:attempted-recon; sid:200021827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.xutdbc.id",nocase; classtype:attempted-recon; sid:200021828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.yabztv.id",nocase; classtype:attempted-recon; sid:200021829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.yvzlne.id",nocase; classtype:attempted-recon; sid:200021830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.zcyttz.id",nocase; classtype:attempted-recon; sid:200021831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.zdknwh.id",nocase; classtype:attempted-recon; sid:200021832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.ziehxi.id",nocase; classtype:attempted-recon; sid:200021833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.zkxahi.id",nocase; classtype:attempted-recon; sid:200021834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.zmjezy.id",nocase; classtype:attempted-recon; sid:200021835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.zuaswx.id",nocase; classtype:attempted-recon; sid:200021836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.accunn.id",nocase; classtype:attempted-recon; sid:200021837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.arowal.id",nocase; classtype:attempted-recon; sid:200021838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.asciqo.id",nocase; classtype:attempted-recon; sid:200021839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.bomgwz.id",nocase; classtype:attempted-recon; sid:200021840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.bypiqw.id",nocase; classtype:attempted-recon; sid:200021841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.ciuwoo.id",nocase; classtype:attempted-recon; sid:200021842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.cmoqdm.id",nocase; classtype:attempted-recon; sid:200021843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.cufjaj.id",nocase; classtype:attempted-recon; sid:200021844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.czaoxt.id",nocase; classtype:attempted-recon; sid:200021845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.eaezlo.id",nocase; classtype:attempted-recon; sid:200021846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.egrhtq.id",nocase; classtype:attempted-recon; sid:200021847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.eickib.id",nocase; classtype:attempted-recon; sid:200021848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.epcyai.id",nocase; classtype:attempted-recon; sid:200021849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.fdtieg.id",nocase; classtype:attempted-recon; sid:200021850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.fjfuni.id",nocase; classtype:attempted-recon; sid:200021851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.fkbwav.id",nocase; classtype:attempted-recon; sid:200021852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.gbaluw.id",nocase; classtype:attempted-recon; sid:200021853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.gkaxhu.id",nocase; classtype:attempted-recon; sid:200021854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.gpaqia.id",nocase; classtype:attempted-recon; sid:200021855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.gykmlg.id",nocase; classtype:attempted-recon; sid:200021856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.gyyiwk.id",nocase; classtype:attempted-recon; sid:200021857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.hbzhrq.id",nocase; classtype:attempted-recon; sid:200021858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.hilrzx.id",nocase; classtype:attempted-recon; sid:200021859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.hloymq.id",nocase; classtype:attempted-recon; sid:200021860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.hqnjab.id",nocase; classtype:attempted-recon; sid:200021861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.iclxtv.id",nocase; classtype:attempted-recon; sid:200021862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.iikuie.id",nocase; classtype:attempted-recon; sid:200021863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.jlxkma.id",nocase; classtype:attempted-recon; sid:200021864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.jqlcwt.id",nocase; classtype:attempted-recon; sid:200021865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.jvahcx.id",nocase; classtype:attempted-recon; sid:200021866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.jzuxde.id",nocase; classtype:attempted-recon; sid:200021867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.khlzjd.id",nocase; classtype:attempted-recon; sid:200021868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.krxqdo.id",nocase; classtype:attempted-recon; sid:200021869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.ksbgin.id",nocase; classtype:attempted-recon; sid:200021870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.lndzay.id",nocase; classtype:attempted-recon; sid:200021871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.lxxdeq.id",nocase; classtype:attempted-recon; sid:200021872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.lyiqnd.id",nocase; classtype:attempted-recon; sid:200021873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.lyxyuf.id",nocase; classtype:attempted-recon; sid:200021874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.mbjhhd.id",nocase; classtype:attempted-recon; sid:200021875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.mhlvfi.id",nocase; classtype:attempted-recon; sid:200021876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.mifikv.id",nocase; classtype:attempted-recon; sid:200021877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.mqvjkr.id",nocase; classtype:attempted-recon; sid:200021878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.mrinog.id",nocase; classtype:attempted-recon; sid:200021879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.nbzllz.id",nocase; classtype:attempted-recon; sid:200021880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.nsyflm.id",nocase; classtype:attempted-recon; sid:200021881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.ntdght.id",nocase; classtype:attempted-recon; sid:200021882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.ovpzzh.id",nocase; classtype:attempted-recon; sid:200021883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.pdzcxc.id",nocase; classtype:attempted-recon; sid:200021884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.podujg.id",nocase; classtype:attempted-recon; sid:200021885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.pvqbdr.id",nocase; classtype:attempted-recon; sid:200021886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.qigfcj.id",nocase; classtype:attempted-recon; sid:200021887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.rdinpk.id",nocase; classtype:attempted-recon; sid:200021888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.rqrpjt.id",nocase; classtype:attempted-recon; sid:200021889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.rzyssw.id",nocase; classtype:attempted-recon; sid:200021890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.sfqlok.id",nocase; classtype:attempted-recon; sid:200021891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.ukpvop.id",nocase; classtype:attempted-recon; sid:200021892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.upblku.id",nocase; classtype:attempted-recon; sid:200021893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.uuppfm.id",nocase; classtype:attempted-recon; sid:200021894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.wfzola.id",nocase; classtype:attempted-recon; sid:200021895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.wgkngu.id",nocase; classtype:attempted-recon; sid:200021896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.whdeeh.id",nocase; classtype:attempted-recon; sid:200021897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.xkpjpw.id",nocase; classtype:attempted-recon; sid:200021898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.xqjgyc.id",nocase; classtype:attempted-recon; sid:200021899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.xutdbc.id",nocase; classtype:attempted-recon; sid:200021900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.yabztv.id",nocase; classtype:attempted-recon; sid:200021901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.yvzlne.id",nocase; classtype:attempted-recon; sid:200021902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.zcyttz.id",nocase; classtype:attempted-recon; sid:200021903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.zdknwh.id",nocase; classtype:attempted-recon; sid:200021904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.ziehxi.id",nocase; classtype:attempted-recon; sid:200021905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.zkxahi.id",nocase; classtype:attempted-recon; sid:200021906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.zmjezy.id",nocase; classtype:attempted-recon; sid:200021907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.zuaswx.id",nocase; classtype:attempted-recon; sid:200021908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.accunn.id",nocase; classtype:attempted-recon; sid:200021909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.arowal.id",nocase; classtype:attempted-recon; sid:200021910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.asciqo.id",nocase; classtype:attempted-recon; sid:200021911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.bomgwz.id",nocase; classtype:attempted-recon; sid:200021912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.bypiqw.id",nocase; classtype:attempted-recon; sid:200021913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.ciuwoo.id",nocase; classtype:attempted-recon; sid:200021914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.cmoqdm.id",nocase; classtype:attempted-recon; sid:200021915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.cufjaj.id",nocase; classtype:attempted-recon; sid:200021916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.czaoxt.id",nocase; classtype:attempted-recon; sid:200021917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.eaezlo.id",nocase; classtype:attempted-recon; sid:200021918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.egrhtq.id",nocase; classtype:attempted-recon; sid:200021919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.eickib.id",nocase; classtype:attempted-recon; sid:200021920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.epcyai.id",nocase; classtype:attempted-recon; sid:200021921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.fjfuni.id",nocase; classtype:attempted-recon; sid:200021922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.fkbwav.id",nocase; classtype:attempted-recon; sid:200021923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.gbaluw.id",nocase; classtype:attempted-recon; sid:200021924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.gkaxhu.id",nocase; classtype:attempted-recon; sid:200021925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.gpaqia.id",nocase; classtype:attempted-recon; sid:200021926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.gykmlg.id",nocase; classtype:attempted-recon; sid:200021927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.gyyiwk.id",nocase; classtype:attempted-recon; sid:200021928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.hbzhrq.id",nocase; classtype:attempted-recon; sid:200021929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.hilrzx.id",nocase; classtype:attempted-recon; sid:200021930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.hloymq.id",nocase; classtype:attempted-recon; sid:200021931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.hqnjab.id",nocase; classtype:attempted-recon; sid:200021932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.iclxtv.id",nocase; classtype:attempted-recon; sid:200021933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.iikuie.id",nocase; classtype:attempted-recon; sid:200021934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.jlxkma.id",nocase; classtype:attempted-recon; sid:200021935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.jqlcwt.id",nocase; classtype:attempted-recon; sid:200021936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.jvahcx.id",nocase; classtype:attempted-recon; sid:200021937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.jzuxde.id",nocase; classtype:attempted-recon; sid:200021938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.khlzjd.id",nocase; classtype:attempted-recon; sid:200021939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.krxqdo.id",nocase; classtype:attempted-recon; sid:200021940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.ksbgin.id",nocase; classtype:attempted-recon; sid:200021941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.lndzay.id",nocase; classtype:attempted-recon; sid:200021942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.lxxdeq.id",nocase; classtype:attempted-recon; sid:200021943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.lyiqnd.id",nocase; classtype:attempted-recon; sid:200021944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.lyxyuf.id",nocase; classtype:attempted-recon; sid:200021945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.mbjhhd.id",nocase; classtype:attempted-recon; sid:200021946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.mhlvfi.id",nocase; classtype:attempted-recon; sid:200021947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.mifikv.id",nocase; classtype:attempted-recon; sid:200021948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.mqvjkr.id",nocase; classtype:attempted-recon; sid:200021949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.mrinog.id",nocase; classtype:attempted-recon; sid:200021950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.nbzllz.id",nocase; classtype:attempted-recon; sid:200021951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.nsyflm.id",nocase; classtype:attempted-recon; sid:200021952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.ntdght.id",nocase; classtype:attempted-recon; sid:200021953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.ovpzzh.id",nocase; classtype:attempted-recon; sid:200021954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.pdzcxc.id",nocase; classtype:attempted-recon; sid:200021955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.podujg.id",nocase; classtype:attempted-recon; sid:200021956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.pvqbdr.id",nocase; classtype:attempted-recon; sid:200021957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.qigfcj.id",nocase; classtype:attempted-recon; sid:200021958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.rdinpk.id",nocase; classtype:attempted-recon; sid:200021959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.rqrpjt.id",nocase; classtype:attempted-recon; sid:200021960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.rzyssw.id",nocase; classtype:attempted-recon; sid:200021961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.sfqlok.id",nocase; classtype:attempted-recon; sid:200021962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.ukpvop.id",nocase; classtype:attempted-recon; sid:200021963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.upblku.id",nocase; classtype:attempted-recon; sid:200021964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.uuppfm.id",nocase; classtype:attempted-recon; sid:200021965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.wfzola.id",nocase; classtype:attempted-recon; sid:200021966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.wgkngu.id",nocase; classtype:attempted-recon; sid:200021967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.whdeeh.id",nocase; classtype:attempted-recon; sid:200021968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.xkpjpw.id",nocase; classtype:attempted-recon; sid:200021969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.xqjgyc.id",nocase; classtype:attempted-recon; sid:200021970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.xutdbc.id",nocase; classtype:attempted-recon; sid:200021971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.yabztv.id",nocase; classtype:attempted-recon; sid:200021972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.yvzlne.id",nocase; classtype:attempted-recon; sid:200021973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.zcyttz.id",nocase; classtype:attempted-recon; sid:200021974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.zdknwh.id",nocase; classtype:attempted-recon; sid:200021975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.ziehxi.id",nocase; classtype:attempted-recon; sid:200021976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.zkxahi.id",nocase; classtype:attempted-recon; sid:200021977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.zmjezy.id",nocase; classtype:attempted-recon; sid:200021978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.zuaswx.id",nocase; classtype:attempted-recon; sid:200021979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.accunn.id",nocase; classtype:attempted-recon; sid:200021980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.arowal.id",nocase; classtype:attempted-recon; sid:200021981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.asciqo.id",nocase; classtype:attempted-recon; sid:200021982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.bomgwz.id",nocase; classtype:attempted-recon; sid:200021983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.bypiqw.id",nocase; classtype:attempted-recon; sid:200021984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.ciuwoo.id",nocase; classtype:attempted-recon; sid:200021985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.cmoqdm.id",nocase; classtype:attempted-recon; sid:200021986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.cufjaj.id",nocase; classtype:attempted-recon; sid:200021987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.czaoxt.id",nocase; classtype:attempted-recon; sid:200021988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.eaezlo.id",nocase; classtype:attempted-recon; sid:200021989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.egrhtq.id",nocase; classtype:attempted-recon; sid:200021990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.eickib.id",nocase; classtype:attempted-recon; sid:200021991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.epcyai.id",nocase; classtype:attempted-recon; sid:200021992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.fdtieg.id",nocase; classtype:attempted-recon; sid:200021993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.fjfuni.id",nocase; classtype:attempted-recon; sid:200021994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.fkbwav.id",nocase; classtype:attempted-recon; sid:200021995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.gbaluw.id",nocase; classtype:attempted-recon; sid:200021996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.gkaxhu.id",nocase; classtype:attempted-recon; sid:200021997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.gpaqia.id",nocase; classtype:attempted-recon; sid:200021998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.gykmlg.id",nocase; classtype:attempted-recon; sid:200021999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.gyyiwk.id",nocase; classtype:attempted-recon; sid:200022000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.hbzhrq.id",nocase; classtype:attempted-recon; sid:200022001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.hilrzx.id",nocase; classtype:attempted-recon; sid:200022002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.hloymq.id",nocase; classtype:attempted-recon; sid:200022003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.hqnjab.id",nocase; classtype:attempted-recon; sid:200022004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.iclxtv.id",nocase; classtype:attempted-recon; sid:200022005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.iikuie.id",nocase; classtype:attempted-recon; sid:200022006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.jlxkma.id",nocase; classtype:attempted-recon; sid:200022007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.jqlcwt.id",nocase; classtype:attempted-recon; sid:200022008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.jvahcx.id",nocase; classtype:attempted-recon; sid:200022009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.jzuxde.id",nocase; classtype:attempted-recon; sid:200022010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.khlzjd.id",nocase; classtype:attempted-recon; sid:200022011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.krxqdo.id",nocase; classtype:attempted-recon; sid:200022012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.ksbgin.id",nocase; classtype:attempted-recon; sid:200022013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.lndzay.id",nocase; classtype:attempted-recon; sid:200022014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.lxxdeq.id",nocase; classtype:attempted-recon; sid:200022015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.lyiqnd.id",nocase; classtype:attempted-recon; sid:200022016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.lyxyuf.id",nocase; classtype:attempted-recon; sid:200022017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.mbjhhd.id",nocase; classtype:attempted-recon; sid:200022018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.mhlvfi.id",nocase; classtype:attempted-recon; sid:200022019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.mifikv.id",nocase; classtype:attempted-recon; sid:200022020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.mqvjkr.id",nocase; classtype:attempted-recon; sid:200022021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.mrinog.id",nocase; classtype:attempted-recon; sid:200022022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.nbzllz.id",nocase; classtype:attempted-recon; sid:200022023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.nsyflm.id",nocase; classtype:attempted-recon; sid:200022024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.ntdght.id",nocase; classtype:attempted-recon; sid:200022025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.ovpzzh.id",nocase; classtype:attempted-recon; sid:200022026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.pdzcxc.id",nocase; classtype:attempted-recon; sid:200022027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.podujg.id",nocase; classtype:attempted-recon; sid:200022028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.pvqbdr.id",nocase; classtype:attempted-recon; sid:200022029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.qigfcj.id",nocase; classtype:attempted-recon; sid:200022030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.rdinpk.id",nocase; classtype:attempted-recon; sid:200022031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.rqrpjt.id",nocase; classtype:attempted-recon; sid:200022032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.rzyssw.id",nocase; classtype:attempted-recon; sid:200022033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.sfqlok.id",nocase; classtype:attempted-recon; sid:200022034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.ukpvop.id",nocase; classtype:attempted-recon; sid:200022035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.upblku.id",nocase; classtype:attempted-recon; sid:200022036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.uuppfm.id",nocase; classtype:attempted-recon; sid:200022037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.wfzola.id",nocase; classtype:attempted-recon; sid:200022038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.wgkngu.id",nocase; classtype:attempted-recon; sid:200022039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.whdeeh.id",nocase; classtype:attempted-recon; sid:200022040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.xkpjpw.id",nocase; classtype:attempted-recon; sid:200022041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.xqjgyc.id",nocase; classtype:attempted-recon; sid:200022042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.xutdbc.id",nocase; classtype:attempted-recon; sid:200022043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.yabztv.id",nocase; classtype:attempted-recon; sid:200022044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.yvzlne.id",nocase; classtype:attempted-recon; sid:200022045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.zcyttz.id",nocase; classtype:attempted-recon; sid:200022046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.zdknwh.id",nocase; classtype:attempted-recon; sid:200022047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.ziehxi.id",nocase; classtype:attempted-recon; sid:200022048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.zkxahi.id",nocase; classtype:attempted-recon; sid:200022049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.zmjezy.id",nocase; classtype:attempted-recon; sid:200022050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.zuaswx.id",nocase; classtype:attempted-recon; sid:200022051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.accunn.id",nocase; classtype:attempted-recon; sid:200022052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.arowal.id",nocase; classtype:attempted-recon; sid:200022053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.asciqo.id",nocase; classtype:attempted-recon; sid:200022054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.bomgwz.id",nocase; classtype:attempted-recon; sid:200022055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.bypiqw.id",nocase; classtype:attempted-recon; sid:200022056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.ciuwoo.id",nocase; classtype:attempted-recon; sid:200022057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.cmoqdm.id",nocase; classtype:attempted-recon; sid:200022058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.cufjaj.id",nocase; classtype:attempted-recon; sid:200022059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.czaoxt.id",nocase; classtype:attempted-recon; sid:200022060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.eaezlo.id",nocase; classtype:attempted-recon; sid:200022061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.egrhtq.id",nocase; classtype:attempted-recon; sid:200022062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.eickib.id",nocase; classtype:attempted-recon; sid:200022063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.epcyai.id",nocase; classtype:attempted-recon; sid:200022064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.fdtieg.id",nocase; classtype:attempted-recon; sid:200022065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.fjfuni.id",nocase; classtype:attempted-recon; sid:200022066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.fkbwav.id",nocase; classtype:attempted-recon; sid:200022067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.gbaluw.id",nocase; classtype:attempted-recon; sid:200022068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.gkaxhu.id",nocase; classtype:attempted-recon; sid:200022069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.gpaqia.id",nocase; classtype:attempted-recon; sid:200022070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.gykmlg.id",nocase; classtype:attempted-recon; sid:200022071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.gyyiwk.id",nocase; classtype:attempted-recon; sid:200022072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.hbzhrq.id",nocase; classtype:attempted-recon; sid:200022073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.hilrzx.id",nocase; classtype:attempted-recon; sid:200022074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.hloymq.id",nocase; classtype:attempted-recon; sid:200022075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.hqnjab.id",nocase; classtype:attempted-recon; sid:200022076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.iclxtv.id",nocase; classtype:attempted-recon; sid:200022077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.iikuie.id",nocase; classtype:attempted-recon; sid:200022078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.jlxkma.id",nocase; classtype:attempted-recon; sid:200022079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.jqlcwt.id",nocase; classtype:attempted-recon; sid:200022080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.jvahcx.id",nocase; classtype:attempted-recon; sid:200022081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.jzuxde.id",nocase; classtype:attempted-recon; sid:200022082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.khlzjd.id",nocase; classtype:attempted-recon; sid:200022083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.krxqdo.id",nocase; classtype:attempted-recon; sid:200022084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.ksbgin.id",nocase; classtype:attempted-recon; sid:200022085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.lndzay.id",nocase; classtype:attempted-recon; sid:200022086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.lxxdeq.id",nocase; classtype:attempted-recon; sid:200022087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.lyiqnd.id",nocase; classtype:attempted-recon; sid:200022088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.lyxyuf.id",nocase; classtype:attempted-recon; sid:200022089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.mbjhhd.id",nocase; classtype:attempted-recon; sid:200022090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.mhlvfi.id",nocase; classtype:attempted-recon; sid:200022091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.mifikv.id",nocase; classtype:attempted-recon; sid:200022092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.mqvjkr.id",nocase; classtype:attempted-recon; sid:200022093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.mrinog.id",nocase; classtype:attempted-recon; sid:200022094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.nbzllz.id",nocase; classtype:attempted-recon; sid:200022095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.nsyflm.id",nocase; classtype:attempted-recon; sid:200022096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.ntdght.id",nocase; classtype:attempted-recon; sid:200022097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.ovpzzh.id",nocase; classtype:attempted-recon; sid:200022098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.pdzcxc.id",nocase; classtype:attempted-recon; sid:200022099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.podujg.id",nocase; classtype:attempted-recon; sid:200022100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.pvqbdr.id",nocase; classtype:attempted-recon; sid:200022101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.qigfcj.id",nocase; classtype:attempted-recon; sid:200022102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.rdinpk.id",nocase; classtype:attempted-recon; sid:200022103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.rqrpjt.id",nocase; classtype:attempted-recon; sid:200022104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.rzyssw.id",nocase; classtype:attempted-recon; sid:200022105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.sfqlok.id",nocase; classtype:attempted-recon; sid:200022106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.ukpvop.id",nocase; classtype:attempted-recon; sid:200022107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.upblku.id",nocase; classtype:attempted-recon; sid:200022108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.uuppfm.id",nocase; classtype:attempted-recon; sid:200022109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.wfzola.id",nocase; classtype:attempted-recon; sid:200022110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.wgkngu.id",nocase; classtype:attempted-recon; sid:200022111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.whdeeh.id",nocase; classtype:attempted-recon; sid:200022112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.xkpjpw.id",nocase; classtype:attempted-recon; sid:200022113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.xqjgyc.id",nocase; classtype:attempted-recon; sid:200022114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.xutdbc.id",nocase; classtype:attempted-recon; sid:200022115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.yabztv.id",nocase; classtype:attempted-recon; sid:200022116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.yvzlne.id",nocase; classtype:attempted-recon; sid:200022117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.zcyttz.id",nocase; classtype:attempted-recon; sid:200022118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.zdknwh.id",nocase; classtype:attempted-recon; sid:200022119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.ziehxi.id",nocase; classtype:attempted-recon; sid:200022120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.zkxahi.id",nocase; classtype:attempted-recon; sid:200022121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.zmjezy.id",nocase; classtype:attempted-recon; sid:200022122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.zuaswx.id",nocase; classtype:attempted-recon; sid:200022123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.accunn.id",nocase; classtype:attempted-recon; sid:200022124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.arowal.id",nocase; classtype:attempted-recon; sid:200022125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.asciqo.id",nocase; classtype:attempted-recon; sid:200022126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.bomgwz.id",nocase; classtype:attempted-recon; sid:200022127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.bypiqw.id",nocase; classtype:attempted-recon; sid:200022128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.ciuwoo.id",nocase; classtype:attempted-recon; sid:200022129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.cmoqdm.id",nocase; classtype:attempted-recon; sid:200022130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.cufjaj.id",nocase; classtype:attempted-recon; sid:200022131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.czaoxt.id",nocase; classtype:attempted-recon; sid:200022132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.eaezlo.id",nocase; classtype:attempted-recon; sid:200022133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.egrhtq.id",nocase; classtype:attempted-recon; sid:200022134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.eickib.id",nocase; classtype:attempted-recon; sid:200022135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.epcyai.id",nocase; classtype:attempted-recon; sid:200022136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.fdtieg.id",nocase; classtype:attempted-recon; sid:200022137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.fjfuni.id",nocase; classtype:attempted-recon; sid:200022138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.fkbwav.id",nocase; classtype:attempted-recon; sid:200022139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.gbaluw.id",nocase; classtype:attempted-recon; sid:200022140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.gkaxhu.id",nocase; classtype:attempted-recon; sid:200022141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.gpaqia.id",nocase; classtype:attempted-recon; sid:200022142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.gykmlg.id",nocase; classtype:attempted-recon; sid:200022143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.gyyiwk.id",nocase; classtype:attempted-recon; sid:200022144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.hbzhrq.id",nocase; classtype:attempted-recon; sid:200022145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.hilrzx.id",nocase; classtype:attempted-recon; sid:200022146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.hloymq.id",nocase; classtype:attempted-recon; sid:200022147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.hqnjab.id",nocase; classtype:attempted-recon; sid:200022148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.iclxtv.id",nocase; classtype:attempted-recon; sid:200022149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.iikuie.id",nocase; classtype:attempted-recon; sid:200022150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.jlxkma.id",nocase; classtype:attempted-recon; sid:200022151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.jqlcwt.id",nocase; classtype:attempted-recon; sid:200022152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.jvahcx.id",nocase; classtype:attempted-recon; sid:200022153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.jzuxde.id",nocase; classtype:attempted-recon; sid:200022154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.khlzjd.id",nocase; classtype:attempted-recon; sid:200022155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.krxqdo.id",nocase; classtype:attempted-recon; sid:200022156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.ksbgin.id",nocase; classtype:attempted-recon; sid:200022157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.lndzay.id",nocase; classtype:attempted-recon; sid:200022158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.lxxdeq.id",nocase; classtype:attempted-recon; sid:200022159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.lyiqnd.id",nocase; classtype:attempted-recon; sid:200022160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.lyxyuf.id",nocase; classtype:attempted-recon; sid:200022161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.mbjhhd.id",nocase; classtype:attempted-recon; sid:200022162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.mhlvfi.id",nocase; classtype:attempted-recon; sid:200022163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.mifikv.id",nocase; classtype:attempted-recon; sid:200022164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.mqvjkr.id",nocase; classtype:attempted-recon; sid:200022165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.mrinog.id",nocase; classtype:attempted-recon; sid:200022166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.nbzllz.id",nocase; classtype:attempted-recon; sid:200022167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.nsyflm.id",nocase; classtype:attempted-recon; sid:200022168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.ntdght.id",nocase; classtype:attempted-recon; sid:200022169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.ovpzzh.id",nocase; classtype:attempted-recon; sid:200022170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.pdzcxc.id",nocase; classtype:attempted-recon; sid:200022171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.podujg.id",nocase; classtype:attempted-recon; sid:200022172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.pvqbdr.id",nocase; classtype:attempted-recon; sid:200022173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.qigfcj.id",nocase; classtype:attempted-recon; sid:200022174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.rdinpk.id",nocase; classtype:attempted-recon; sid:200022175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.rqrpjt.id",nocase; classtype:attempted-recon; sid:200022176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.rzyssw.id",nocase; classtype:attempted-recon; sid:200022177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.sfqlok.id",nocase; classtype:attempted-recon; sid:200022178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.ukpvop.id",nocase; classtype:attempted-recon; sid:200022179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.upblku.id",nocase; classtype:attempted-recon; sid:200022180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.uuppfm.id",nocase; classtype:attempted-recon; sid:200022181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.wfzola.id",nocase; classtype:attempted-recon; sid:200022182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.wgkngu.id",nocase; classtype:attempted-recon; sid:200022183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.whdeeh.id",nocase; classtype:attempted-recon; sid:200022184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.xkpjpw.id",nocase; classtype:attempted-recon; sid:200022185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.xqjgyc.id",nocase; classtype:attempted-recon; sid:200022186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.xutdbc.id",nocase; classtype:attempted-recon; sid:200022187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.yabztv.id",nocase; classtype:attempted-recon; sid:200022188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.yvzlne.id",nocase; classtype:attempted-recon; sid:200022189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.zcyttz.id",nocase; classtype:attempted-recon; sid:200022190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.zdknwh.id",nocase; classtype:attempted-recon; sid:200022191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.ziehxi.id",nocase; classtype:attempted-recon; sid:200022192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.zkxahi.id",nocase; classtype:attempted-recon; sid:200022193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.zmjezy.id",nocase; classtype:attempted-recon; sid:200022194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.zuaswx.id",nocase; classtype:attempted-recon; sid:200022195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.baflrzt.rest",nocase; classtype:attempted-recon; sid:200022196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.bftggqb.rest",nocase; classtype:attempted-recon; sid:200022197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.bhppmal.rest",nocase; classtype:attempted-recon; sid:200022198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.bkiljbe.rest",nocase; classtype:attempted-recon; sid:200022199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.bwcpfbn.rest",nocase; classtype:attempted-recon; sid:200022200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.cnufsqh.rest",nocase; classtype:attempted-recon; sid:200022201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.ctuhgfk.rest",nocase; classtype:attempted-recon; sid:200022202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.drdsyje.rest",nocase; classtype:attempted-recon; sid:200022203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.dtgskgr.rest",nocase; classtype:attempted-recon; sid:200022204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.dvbkugk.rest",nocase; classtype:attempted-recon; sid:200022205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.dwvwhpm.rest",nocase; classtype:attempted-recon; sid:200022206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.eaplgjq.rest",nocase; classtype:attempted-recon; sid:200022207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.ehsqatn.rest",nocase; classtype:attempted-recon; sid:200022208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.emfeyds.rest",nocase; classtype:attempted-recon; sid:200022209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.fcuccth.rest",nocase; classtype:attempted-recon; sid:200022210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.fikixuj.rest",nocase; classtype:attempted-recon; sid:200022211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.ftpstbj.rest",nocase; classtype:attempted-recon; sid:200022212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.fuivkxa.rest",nocase; classtype:attempted-recon; sid:200022213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.fzjyqpy.rest",nocase; classtype:attempted-recon; sid:200022214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.gemisns.rest",nocase; classtype:attempted-recon; sid:200022215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.ggqugsu.rest",nocase; classtype:attempted-recon; sid:200022216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.gvzoadd.rest",nocase; classtype:attempted-recon; sid:200022217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.gybmzej.rest",nocase; classtype:attempted-recon; sid:200022218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.gywmubl.rest",nocase; classtype:attempted-recon; sid:200022219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.hbzrhor.rest",nocase; classtype:attempted-recon; sid:200022220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.hexttrd.rest",nocase; classtype:attempted-recon; sid:200022221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.hmamatm.rest",nocase; classtype:attempted-recon; sid:200022222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.hqgidqk.rest",nocase; classtype:attempted-recon; sid:200022223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.hymzwrr.rest",nocase; classtype:attempted-recon; sid:200022224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.hynvkvn.rest",nocase; classtype:attempted-recon; sid:200022225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.igsxqxl.rest",nocase; classtype:attempted-recon; sid:200022226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.iktxxwb.rest",nocase; classtype:attempted-recon; sid:200022227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.ipvrmgx.rest",nocase; classtype:attempted-recon; sid:200022228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.iuwqqxo.rest",nocase; classtype:attempted-recon; sid:200022229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.jeseavd.rest",nocase; classtype:attempted-recon; sid:200022230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.jjmxonp.rest",nocase; classtype:attempted-recon; sid:200022231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.kteglik.rest",nocase; classtype:attempted-recon; sid:200022232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.kzoatrc.rest",nocase; classtype:attempted-recon; sid:200022233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.lghbwne.rest",nocase; classtype:attempted-recon; sid:200022234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.lihewoq.rest",nocase; classtype:attempted-recon; sid:200022235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.lmbtnda.rest",nocase; classtype:attempted-recon; sid:200022236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.lmdmaum.rest",nocase; classtype:attempted-recon; sid:200022237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.loszost.rest",nocase; classtype:attempted-recon; sid:200022238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.mbjalki.rest",nocase; classtype:attempted-recon; sid:200022239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.mbwcvge.rest",nocase; classtype:attempted-recon; sid:200022240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.mfbkvgm.rest",nocase; classtype:attempted-recon; sid:200022241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.mrdefgv.rest",nocase; classtype:attempted-recon; sid:200022242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.mrqfkgo.rest",nocase; classtype:attempted-recon; sid:200022243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.mtfamvq.rest",nocase; classtype:attempted-recon; sid:200022244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.needmwo.rest",nocase; classtype:attempted-recon; sid:200022245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.nhqgutl.rest",nocase; classtype:attempted-recon; sid:200022246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.njtawnu.rest",nocase; classtype:attempted-recon; sid:200022247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.nqhviyu.rest",nocase; classtype:attempted-recon; sid:200022248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.ntsckua.rest",nocase; classtype:attempted-recon; sid:200022249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.nulhvqm.rest",nocase; classtype:attempted-recon; sid:200022250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.obfutzz.rest",nocase; classtype:attempted-recon; sid:200022251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.ocsbjyy.rest",nocase; classtype:attempted-recon; sid:200022252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.ogztqfa.rest",nocase; classtype:attempted-recon; sid:200022253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.onggczh.rest",nocase; classtype:attempted-recon; sid:200022254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.ouqcrce.rest",nocase; classtype:attempted-recon; sid:200022255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.ovuydax.rest",nocase; classtype:attempted-recon; sid:200022256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.palxshs.rest",nocase; classtype:attempted-recon; sid:200022257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.pbeozzc.rest",nocase; classtype:attempted-recon; sid:200022258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.pefczzw.rest",nocase; classtype:attempted-recon; sid:200022259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.pfvdgcs.rest",nocase; classtype:attempted-recon; sid:200022260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.poywtcc.rest",nocase; classtype:attempted-recon; sid:200022261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.prcjndo.rest",nocase; classtype:attempted-recon; sid:200022262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.pyamdhg.rest",nocase; classtype:attempted-recon; sid:200022263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.qcgneuj.rest",nocase; classtype:attempted-recon; sid:200022264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.qmvhsgu.rest",nocase; classtype:attempted-recon; sid:200022265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.qthlkxf.rest",nocase; classtype:attempted-recon; sid:200022266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.qtroqhr.rest",nocase; classtype:attempted-recon; sid:200022267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.qwacvnw.rest",nocase; classtype:attempted-recon; sid:200022268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.ranzilm.rest",nocase; classtype:attempted-recon; sid:200022269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.rjwdmhv.rest",nocase; classtype:attempted-recon; sid:200022270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.rkzcxlj.rest",nocase; classtype:attempted-recon; sid:200022271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.rpqqioa.rest",nocase; classtype:attempted-recon; sid:200022272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.rtkpgqb.rest",nocase; classtype:attempted-recon; sid:200022273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.rytdkra.rest",nocase; classtype:attempted-recon; sid:200022274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.syluojt.rest",nocase; classtype:attempted-recon; sid:200022275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.taemnbb.rest",nocase; classtype:attempted-recon; sid:200022276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.thnoceg.rest",nocase; classtype:attempted-recon; sid:200022277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.tiqrcpl.rest",nocase; classtype:attempted-recon; sid:200022278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.ttniksm.rest",nocase; classtype:attempted-recon; sid:200022279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.uddktyy.rest",nocase; classtype:attempted-recon; sid:200022280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.ukzxens.rest",nocase; classtype:attempted-recon; sid:200022281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.ulztbbb.rest",nocase; classtype:attempted-recon; sid:200022282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.vcobpue.rest",nocase; classtype:attempted-recon; sid:200022283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.vtwwkwu.rest",nocase; classtype:attempted-recon; sid:200022284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.wgkkmrd.rest",nocase; classtype:attempted-recon; sid:200022285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.wokutiv.rest",nocase; classtype:attempted-recon; sid:200022286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.xppqjxo.rest",nocase; classtype:attempted-recon; sid:200022287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.xzstmlr.rest",nocase; classtype:attempted-recon; sid:200022288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.ydtfxhz.rest",nocase; classtype:attempted-recon; sid:200022289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.yvlpjam.rest",nocase; classtype:attempted-recon; sid:200022290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.zbshkeo.rest",nocase; classtype:attempted-recon; sid:200022291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.zikhocp.rest",nocase; classtype:attempted-recon; sid:200022292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.zklwhxa.rest",nocase; classtype:attempted-recon; sid:200022293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.zmwmbck.rest",nocase; classtype:attempted-recon; sid:200022294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viosreosnv.vsoersioirevxarevi.zugzybw.rest",nocase; classtype:attempted-recon; sid:200022295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vip-video-malaysia.zzux.com",nocase; classtype:attempted-recon; sid:200022296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vipfbtools.com",nocase; classtype:attempted-recon; sid:200022297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"virtual.labdigbdbqapb.com",nocase; classtype:attempted-recon; sid:200022298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"virtual.labdigbdbstgpb.com",nocase; classtype:attempted-recon; sid:200022299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"virtualnetbrasil.com",nocase; classtype:attempted-recon; sid:200022300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"virtualper.bancols.repl.co",nocase; classtype:attempted-recon; sid:200022301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"virtupermisonas32523.personas1.repl.co",nocase; classtype:attempted-recon; sid:200022302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vis-stort.github.io",nocase; classtype:attempted-recon; sid:200022303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visamasecoocsoersd.moasecsecsccrerd.brdfuem.cn",nocase; classtype:attempted-recon; sid:200022304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visamasecoocsoersd.moasecsecsccrerd.btqhqpo.cn",nocase; classtype:attempted-recon; sid:200022305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visecai.vscsaeiso.mxnlcl.top",nocase; classtype:attempted-recon; sid:200022306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visecai.vscsaeiso.pagrhw.top",nocase; classtype:attempted-recon; sid:200022307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visecai.vscsaeiso.qmzqhg.top",nocase; classtype:attempted-recon; sid:200022308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visecasecsvsie.viscoeacasvsie.yingjiyoupin6.net",nocase; classtype:attempted-recon; sid:200022309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visecseasvsie.viseccasvsie.coinbig.top",nocase; classtype:attempted-recon; sid:200022310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseeceee.cieavrsscsoeeer.iieososoicencseesoeeras.xiaoyangguan.cc",nocase; classtype:attempted-recon; sid:200022311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseeeocscaei.rvssccsoeaeieoisscencaseoocccesoe.nepli.co",nocase; classtype:attempted-recon; sid:200022312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseesccai.vsscsoaeeesicso.kmqowf.top",nocase; classtype:attempted-recon; sid:200022313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseeseosieecarci.vcssecsieoasoceneaseocieusoccesoesoc.azui.co",nocase; classtype:attempted-recon; sid:200022314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseeseosieecarci.vcssecsieoasoceneaseocieusoccesoesoc.dekl.co",nocase; classtype:attempted-recon; sid:200022315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseeseosieecarci.vcssecsieoasoceneaseocieusoccesoesoc.nikr.co",nocase; classtype:attempted-recon; sid:200022316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseeseosieecarci.vcssecsieoasoceneaseocieusoccesoesoc.sfcc.co",nocase; classtype:attempted-recon; sid:200022317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseeseosieeocrcai.cvsescieossocenaaseoceeuioccesoesscoc.gefro.co",nocase; classtype:attempted-recon; sid:200022318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseeseosieeocrcai.cvsescieossocenaaseoceeuioccesoesscoc.ktsg.co",nocase; classtype:attempted-recon; sid:200022319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseeseosieescrcai.cvsescieossocenaaseoceeueoccesoesicso.rfuq.co",nocase; classtype:attempted-recon; sid:200022320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseiocai.vscsaeiisoc.mstcly.top",nocase; classtype:attempted-recon; sid:200022321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseiocai.vscsaeiisoc.pqjxit.top",nocase; classtype:attempted-recon; sid:200022322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseiocai.vscsaeiisoc.qxkahc.top",nocase; classtype:attempted-recon; sid:200022323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseiocai.vscsaeiisoc.vboqkw.top",nocase; classtype:attempted-recon; sid:200022324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseiocai.vscsaeiisoc.wkyrak.top",nocase; classtype:attempted-recon; sid:200022325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseioscai.vscsaieeicso.mizduc.top",nocase; classtype:attempted-recon; sid:200022326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseioscai.vscsaieeicso.spdzvq.top",nocase; classtype:attempted-recon; sid:200022327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseioscai.vscsaieeicso.stjjjj.top",nocase; classtype:attempted-recon; sid:200022328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseocai.vscsaeisoc.mgjuxa.top",nocase; classtype:attempted-recon; sid:200022329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseocai.vscsaeisoc.msnwrh.top",nocase; classtype:attempted-recon; sid:200022330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseoscai.vscsaeeicso.qdzxsq.top",nocase; classtype:attempted-recon; sid:200022331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseoscai.vscsaeeicso.stjjjj.top",nocase; classtype:attempted-recon; sid:200022332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visescai.vscsaeeiso.mojnlk.top",nocase; classtype:attempted-recon; sid:200022333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visescai.vscsaeeiso.ozmvst.top",nocase; classtype:attempted-recon; sid:200022334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visescai.vscsaeeiso.qvnhvd.top",nocase; classtype:attempted-recon; sid:200022335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visescai.vscsaeeiso.qxkahc.top",nocase; classtype:attempted-recon; sid:200022336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseseoieoccai.vsscessoaceeuiosscoc.gnpais.top",nocase; classtype:attempted-recon; sid:200022337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visioncenterss.blogspot.com",nocase; classtype:attempted-recon; sid:200022338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vissvvesie.vvssceoi.nmlubc.top",nocase; classtype:attempted-recon; sid:200022339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visvevsevsasei.visievcccasesaoe.pfqmmr.top",nocase; classtype:attempted-recon; sid:200022340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vital1.webcindario.com",nocase; classtype:attempted-recon; sid:200022341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.aiinpw.za.com",nocase; classtype:attempted-recon; sid:200022342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.apoljj.za.com",nocase; classtype:attempted-recon; sid:200022343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.axbhie.za.com",nocase; classtype:attempted-recon; sid:200022344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.cndiyk.za.com",nocase; classtype:attempted-recon; sid:200022345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.cnzlue.za.com",nocase; classtype:attempted-recon; sid:200022346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.cpclxs.za.com",nocase; classtype:attempted-recon; sid:200022347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.difkhu.za.com",nocase; classtype:attempted-recon; sid:200022348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.dnjggs.za.com",nocase; classtype:attempted-recon; sid:200022349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.dyjnbb.za.com",nocase; classtype:attempted-recon; sid:200022350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.epmgtc.za.com",nocase; classtype:attempted-recon; sid:200022351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.fflglh.za.com",nocase; classtype:attempted-recon; sid:200022352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.fjdayb.za.com",nocase; classtype:attempted-recon; sid:200022353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.flydpf.za.com",nocase; classtype:attempted-recon; sid:200022354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.fmdodt.za.com",nocase; classtype:attempted-recon; sid:200022355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.fmmfcz.za.com",nocase; classtype:attempted-recon; sid:200022356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.frghvs.za.com",nocase; classtype:attempted-recon; sid:200022357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.fyyfxo.za.com",nocase; classtype:attempted-recon; sid:200022358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.gbwdln.za.com",nocase; classtype:attempted-recon; sid:200022359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.gbxbjo.za.com",nocase; classtype:attempted-recon; sid:200022360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.hcnqqk.za.com",nocase; classtype:attempted-recon; sid:200022361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.iezkxp.za.com",nocase; classtype:attempted-recon; sid:200022362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.ifpdph.za.com",nocase; classtype:attempted-recon; sid:200022363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.jdjghn.za.com",nocase; classtype:attempted-recon; sid:200022364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.jygknw.za.com",nocase; classtype:attempted-recon; sid:200022365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.jzemci.za.com",nocase; classtype:attempted-recon; sid:200022366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.kzdaec.za.com",nocase; classtype:attempted-recon; sid:200022367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.lcuqbc.za.com",nocase; classtype:attempted-recon; sid:200022368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.lklgbt.za.com",nocase; classtype:attempted-recon; sid:200022369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.lqonrt.za.com",nocase; classtype:attempted-recon; sid:200022370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.lvuojw.za.com",nocase; classtype:attempted-recon; sid:200022371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.lymdeg.za.com",nocase; classtype:attempted-recon; sid:200022372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.mgfxpv.za.com",nocase; classtype:attempted-recon; sid:200022373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.nkgnxu.za.com",nocase; classtype:attempted-recon; sid:200022374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.nskxef.za.com",nocase; classtype:attempted-recon; sid:200022375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.nsrsyf.za.com",nocase; classtype:attempted-recon; sid:200022376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.ntmdlo.za.com",nocase; classtype:attempted-recon; sid:200022377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.nyapck.za.com",nocase; classtype:attempted-recon; sid:200022378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.oaimcs.za.com",nocase; classtype:attempted-recon; sid:200022379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.obnjjr.za.com",nocase; classtype:attempted-recon; sid:200022380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.ojabvb.za.com",nocase; classtype:attempted-recon; sid:200022381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.pddjuu.za.com",nocase; classtype:attempted-recon; sid:200022382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.peqrlu.za.com",nocase; classtype:attempted-recon; sid:200022383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.pfkndl.za.com",nocase; classtype:attempted-recon; sid:200022384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.pfxtar.za.com",nocase; classtype:attempted-recon; sid:200022385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.phskmc.za.com",nocase; classtype:attempted-recon; sid:200022386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.pilzbq.za.com",nocase; classtype:attempted-recon; sid:200022387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.prfshi.za.com",nocase; classtype:attempted-recon; sid:200022388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.pruuwp.za.com",nocase; classtype:attempted-recon; sid:200022389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.pxwxmw.za.com",nocase; classtype:attempted-recon; sid:200022390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.qbkymz.za.com",nocase; classtype:attempted-recon; sid:200022391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.qigckf.za.com",nocase; classtype:attempted-recon; sid:200022392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.qsgdnx.za.com",nocase; classtype:attempted-recon; sid:200022393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.qyoqyz.za.com",nocase; classtype:attempted-recon; sid:200022394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.qytbke.za.com",nocase; classtype:attempted-recon; sid:200022395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.rouqjs.za.com",nocase; classtype:attempted-recon; sid:200022396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.rsxmth.za.com",nocase; classtype:attempted-recon; sid:200022397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.ryogde.za.com",nocase; classtype:attempted-recon; sid:200022398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.sbonjn.za.com",nocase; classtype:attempted-recon; sid:200022399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.sewril.za.com",nocase; classtype:attempted-recon; sid:200022400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.stghfe.za.com",nocase; classtype:attempted-recon; sid:200022401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.sznube.za.com",nocase; classtype:attempted-recon; sid:200022402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.taqabm.za.com",nocase; classtype:attempted-recon; sid:200022403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.tfdebx.za.com",nocase; classtype:attempted-recon; sid:200022404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.trzfav.za.com",nocase; classtype:attempted-recon; sid:200022405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.uhdxmb.za.com",nocase; classtype:attempted-recon; sid:200022406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.uktqmo.za.com",nocase; classtype:attempted-recon; sid:200022407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.vhwplz.za.com",nocase; classtype:attempted-recon; sid:200022408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.vixxvg.za.com",nocase; classtype:attempted-recon; sid:200022409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.vmmoue.za.com",nocase; classtype:attempted-recon; sid:200022410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.vnsscq.za.com",nocase; classtype:attempted-recon; sid:200022411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.vtihba.za.com",nocase; classtype:attempted-recon; sid:200022412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.vucabx.za.com",nocase; classtype:attempted-recon; sid:200022413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.vunivt.za.com",nocase; classtype:attempted-recon; sid:200022414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.vusnur.za.com",nocase; classtype:attempted-recon; sid:200022415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.wssjge.za.com",nocase; classtype:attempted-recon; sid:200022416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.wylftw.za.com",nocase; classtype:attempted-recon; sid:200022417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.xioxfp.za.com",nocase; classtype:attempted-recon; sid:200022418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.xmigxe.za.com",nocase; classtype:attempted-recon; sid:200022419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.ygrkwy.za.com",nocase; classtype:attempted-recon; sid:200022420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.yjnkya.za.com",nocase; classtype:attempted-recon; sid:200022421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.ylvgii.za.com",nocase; classtype:attempted-recon; sid:200022422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.ymixml.za.com",nocase; classtype:attempted-recon; sid:200022423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.yoltyz.za.com",nocase; classtype:attempted-recon; sid:200022424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.yyciai.za.com",nocase; classtype:attempted-recon; sid:200022425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.zenagx.za.com",nocase; classtype:attempted-recon; sid:200022426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.zhafla.za.com",nocase; classtype:attempted-recon; sid:200022427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.ziqmtw.za.com",nocase; classtype:attempted-recon; sid:200022428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.ziuzyk.za.com",nocase; classtype:attempted-recon; sid:200022429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.zktobi.za.com",nocase; classtype:attempted-recon; sid:200022430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.zlppsf.za.com",nocase; classtype:attempted-recon; sid:200022431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.zrmusc.za.com",nocase; classtype:attempted-recon; sid:200022432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcseecei.viveaaevesi.zudxug.za.com",nocase; classtype:attempted-recon; sid:200022433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.aiinpw.za.com",nocase; classtype:attempted-recon; sid:200022434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.apoljj.za.com",nocase; classtype:attempted-recon; sid:200022435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.axbhie.za.com",nocase; classtype:attempted-recon; sid:200022436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.cbargn.za.com",nocase; classtype:attempted-recon; sid:200022437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.cndiyk.za.com",nocase; classtype:attempted-recon; sid:200022438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.cnzlue.za.com",nocase; classtype:attempted-recon; sid:200022439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.cpclxs.za.com",nocase; classtype:attempted-recon; sid:200022440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.difkhu.za.com",nocase; classtype:attempted-recon; sid:200022441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.dnjggs.za.com",nocase; classtype:attempted-recon; sid:200022442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.dzniib.za.com",nocase; classtype:attempted-recon; sid:200022443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.epmgtc.za.com",nocase; classtype:attempted-recon; sid:200022444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.fflglh.za.com",nocase; classtype:attempted-recon; sid:200022445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.fjdayb.za.com",nocase; classtype:attempted-recon; sid:200022446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.flydpf.za.com",nocase; classtype:attempted-recon; sid:200022447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.fmdodt.za.com",nocase; classtype:attempted-recon; sid:200022448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.fmmfcz.za.com",nocase; classtype:attempted-recon; sid:200022449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.frghvs.za.com",nocase; classtype:attempted-recon; sid:200022450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.gbwdln.za.com",nocase; classtype:attempted-recon; sid:200022451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.gbxbjo.za.com",nocase; classtype:attempted-recon; sid:200022452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.hcnqqk.za.com",nocase; classtype:attempted-recon; sid:200022453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.iezkxp.za.com",nocase; classtype:attempted-recon; sid:200022454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.ifpdph.za.com",nocase; classtype:attempted-recon; sid:200022455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.jdjghn.za.com",nocase; classtype:attempted-recon; sid:200022456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.jpxnnz.za.com",nocase; classtype:attempted-recon; sid:200022457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.jygknw.za.com",nocase; classtype:attempted-recon; sid:200022458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.jzemci.za.com",nocase; classtype:attempted-recon; sid:200022459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.kzdaec.za.com",nocase; classtype:attempted-recon; sid:200022460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.lcuqbc.za.com",nocase; classtype:attempted-recon; sid:200022461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.lklgbt.za.com",nocase; classtype:attempted-recon; sid:200022462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.lqonrt.za.com",nocase; classtype:attempted-recon; sid:200022463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.lymdeg.za.com",nocase; classtype:attempted-recon; sid:200022464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.mgfxpv.za.com",nocase; classtype:attempted-recon; sid:200022465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.nkgnxu.za.com",nocase; classtype:attempted-recon; sid:200022466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.nlutye.za.com",nocase; classtype:attempted-recon; sid:200022467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.nqawww.za.com",nocase; classtype:attempted-recon; sid:200022468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.nskxef.za.com",nocase; classtype:attempted-recon; sid:200022469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.nsrsyf.za.com",nocase; classtype:attempted-recon; sid:200022470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.ntmdlo.za.com",nocase; classtype:attempted-recon; sid:200022471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.nyapck.za.com",nocase; classtype:attempted-recon; sid:200022472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.oaimcs.za.com",nocase; classtype:attempted-recon; sid:200022473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.obnjjr.za.com",nocase; classtype:attempted-recon; sid:200022474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.ojabvb.za.com",nocase; classtype:attempted-recon; sid:200022475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.pddjuu.za.com",nocase; classtype:attempted-recon; sid:200022476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.peqrlu.za.com",nocase; classtype:attempted-recon; sid:200022477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.pfkndl.za.com",nocase; classtype:attempted-recon; sid:200022478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.pilzbq.za.com",nocase; classtype:attempted-recon; sid:200022479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.prfshi.za.com",nocase; classtype:attempted-recon; sid:200022480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.pruuwp.za.com",nocase; classtype:attempted-recon; sid:200022481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.pxwxmw.za.com",nocase; classtype:attempted-recon; sid:200022482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.qbkymz.za.com",nocase; classtype:attempted-recon; sid:200022483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.qigckf.za.com",nocase; classtype:attempted-recon; sid:200022484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.qsgdnx.za.com",nocase; classtype:attempted-recon; sid:200022485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.qyoqyz.za.com",nocase; classtype:attempted-recon; sid:200022486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.qytbke.za.com",nocase; classtype:attempted-recon; sid:200022487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.rouqjs.za.com",nocase; classtype:attempted-recon; sid:200022488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.rsxmth.za.com",nocase; classtype:attempted-recon; sid:200022489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.sbonjn.za.com",nocase; classtype:attempted-recon; sid:200022490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.sewril.za.com",nocase; classtype:attempted-recon; sid:200022491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.stghfe.za.com",nocase; classtype:attempted-recon; sid:200022492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.sznube.za.com",nocase; classtype:attempted-recon; sid:200022493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.taqabm.za.com",nocase; classtype:attempted-recon; sid:200022494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.tfdebx.za.com",nocase; classtype:attempted-recon; sid:200022495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.trzfav.za.com",nocase; classtype:attempted-recon; sid:200022496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.uhdxmb.za.com",nocase; classtype:attempted-recon; sid:200022497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.uktqmo.za.com",nocase; classtype:attempted-recon; sid:200022498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.vhwplz.za.com",nocase; classtype:attempted-recon; sid:200022499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.vixxvg.za.com",nocase; classtype:attempted-recon; sid:200022500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.vjyswj.za.com",nocase; classtype:attempted-recon; sid:200022501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.vmmoue.za.com",nocase; classtype:attempted-recon; sid:200022502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.vnsscq.za.com",nocase; classtype:attempted-recon; sid:200022503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.vucabx.za.com",nocase; classtype:attempted-recon; sid:200022504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.vunivt.za.com",nocase; classtype:attempted-recon; sid:200022505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.vusnur.za.com",nocase; classtype:attempted-recon; sid:200022506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.wffxjj.za.com",nocase; classtype:attempted-recon; sid:200022507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.wssjge.za.com",nocase; classtype:attempted-recon; sid:200022508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.wylftw.za.com",nocase; classtype:attempted-recon; sid:200022509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.xioxfp.za.com",nocase; classtype:attempted-recon; sid:200022510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.xmigxe.za.com",nocase; classtype:attempted-recon; sid:200022511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.ygrkwy.za.com",nocase; classtype:attempted-recon; sid:200022512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.yjnkya.za.com",nocase; classtype:attempted-recon; sid:200022513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.ylvgii.za.com",nocase; classtype:attempted-recon; sid:200022514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.ymixml.za.com",nocase; classtype:attempted-recon; sid:200022515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.yoltyz.za.com",nocase; classtype:attempted-recon; sid:200022516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.yyciai.za.com",nocase; classtype:attempted-recon; sid:200022517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.zhafla.za.com",nocase; classtype:attempted-recon; sid:200022518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.ziqmtw.za.com",nocase; classtype:attempted-recon; sid:200022519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.ziuzyk.za.com",nocase; classtype:attempted-recon; sid:200022520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.zktobi.za.com",nocase; classtype:attempted-recon; sid:200022521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.zlppsf.za.com",nocase; classtype:attempted-recon; sid:200022522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.zrmusc.za.com",nocase; classtype:attempted-recon; sid:200022523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsevei.vivesavesi.zudxug.za.com",nocase; classtype:attempted-recon; sid:200022524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.aiinpw.za.com",nocase; classtype:attempted-recon; sid:200022525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.apoljj.za.com",nocase; classtype:attempted-recon; sid:200022526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.axbhie.za.com",nocase; classtype:attempted-recon; sid:200022527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.cbargn.za.com",nocase; classtype:attempted-recon; sid:200022528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.cndiyk.za.com",nocase; classtype:attempted-recon; sid:200022529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.cnzlue.za.com",nocase; classtype:attempted-recon; sid:200022530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.cpclxs.za.com",nocase; classtype:attempted-recon; sid:200022531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.difkhu.za.com",nocase; classtype:attempted-recon; sid:200022532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.dnjggs.za.com",nocase; classtype:attempted-recon; sid:200022533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.dyjnbb.za.com",nocase; classtype:attempted-recon; sid:200022534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.dzniib.za.com",nocase; classtype:attempted-recon; sid:200022535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.epmgtc.za.com",nocase; classtype:attempted-recon; sid:200022536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.fjdayb.za.com",nocase; classtype:attempted-recon; sid:200022537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.flydpf.za.com",nocase; classtype:attempted-recon; sid:200022538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.fmdodt.za.com",nocase; classtype:attempted-recon; sid:200022539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.fmmfcz.za.com",nocase; classtype:attempted-recon; sid:200022540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.frghvs.za.com",nocase; classtype:attempted-recon; sid:200022541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.fthjtm.za.com",nocase; classtype:attempted-recon; sid:200022542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.fyyfxo.za.com",nocase; classtype:attempted-recon; sid:200022543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.gbwdln.za.com",nocase; classtype:attempted-recon; sid:200022544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.gbxbjo.za.com",nocase; classtype:attempted-recon; sid:200022545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.hcnqqk.za.com",nocase; classtype:attempted-recon; sid:200022546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.iezkxp.za.com",nocase; classtype:attempted-recon; sid:200022547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.ifpdph.za.com",nocase; classtype:attempted-recon; sid:200022548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.jdjghn.za.com",nocase; classtype:attempted-recon; sid:200022549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.jpxnnz.za.com",nocase; classtype:attempted-recon; sid:200022550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.jygknw.za.com",nocase; classtype:attempted-recon; sid:200022551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.jzemci.za.com",nocase; classtype:attempted-recon; sid:200022552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.kzdaec.za.com",nocase; classtype:attempted-recon; sid:200022553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.lcuqbc.za.com",nocase; classtype:attempted-recon; sid:200022554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.lqonrt.za.com",nocase; classtype:attempted-recon; sid:200022555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.lvuojw.za.com",nocase; classtype:attempted-recon; sid:200022556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.lymdeg.za.com",nocase; classtype:attempted-recon; sid:200022557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.mgfxpv.za.com",nocase; classtype:attempted-recon; sid:200022558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.nkgnxu.za.com",nocase; classtype:attempted-recon; sid:200022559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.nlutye.za.com",nocase; classtype:attempted-recon; sid:200022560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.nqawww.za.com",nocase; classtype:attempted-recon; sid:200022561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.nskxef.za.com",nocase; classtype:attempted-recon; sid:200022562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.ntmdlo.za.com",nocase; classtype:attempted-recon; sid:200022563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.nyapck.za.com",nocase; classtype:attempted-recon; sid:200022564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.oaimcs.za.com",nocase; classtype:attempted-recon; sid:200022565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.obnjjr.za.com",nocase; classtype:attempted-recon; sid:200022566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.ojabvb.za.com",nocase; classtype:attempted-recon; sid:200022567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.pddjuu.za.com",nocase; classtype:attempted-recon; sid:200022568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.peqrlu.za.com",nocase; classtype:attempted-recon; sid:200022569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.pfkndl.za.com",nocase; classtype:attempted-recon; sid:200022570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.pfxtar.za.com",nocase; classtype:attempted-recon; sid:200022571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.phskmc.za.com",nocase; classtype:attempted-recon; sid:200022572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.pilzbq.za.com",nocase; classtype:attempted-recon; sid:200022573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.prfshi.za.com",nocase; classtype:attempted-recon; sid:200022574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.pxwxmw.za.com",nocase; classtype:attempted-recon; sid:200022575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.qbkymz.za.com",nocase; classtype:attempted-recon; sid:200022576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.qigckf.za.com",nocase; classtype:attempted-recon; sid:200022577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.qsgdnx.za.com",nocase; classtype:attempted-recon; sid:200022578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.qyoqyz.za.com",nocase; classtype:attempted-recon; sid:200022579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.qytbke.za.com",nocase; classtype:attempted-recon; sid:200022580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.rsxmth.za.com",nocase; classtype:attempted-recon; sid:200022581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.ryogde.za.com",nocase; classtype:attempted-recon; sid:200022582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.sbonjn.za.com",nocase; classtype:attempted-recon; sid:200022583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.sewril.za.com",nocase; classtype:attempted-recon; sid:200022584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.stghfe.za.com",nocase; classtype:attempted-recon; sid:200022585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.sznube.za.com",nocase; classtype:attempted-recon; sid:200022586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.taqabm.za.com",nocase; classtype:attempted-recon; sid:200022587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.tfdebx.za.com",nocase; classtype:attempted-recon; sid:200022588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.trzfav.za.com",nocase; classtype:attempted-recon; sid:200022589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.uktqmo.za.com",nocase; classtype:attempted-recon; sid:200022590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.vhwplz.za.com",nocase; classtype:attempted-recon; sid:200022591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.vixxvg.za.com",nocase; classtype:attempted-recon; sid:200022592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.vjyswj.za.com",nocase; classtype:attempted-recon; sid:200022593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.vmmoue.za.com",nocase; classtype:attempted-recon; sid:200022594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.vnsscq.za.com",nocase; classtype:attempted-recon; sid:200022595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.vucabx.za.com",nocase; classtype:attempted-recon; sid:200022596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.vunivt.za.com",nocase; classtype:attempted-recon; sid:200022597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.vusnur.za.com",nocase; classtype:attempted-recon; sid:200022598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.wffxjj.za.com",nocase; classtype:attempted-recon; sid:200022599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.wssjge.za.com",nocase; classtype:attempted-recon; sid:200022600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.xioxfp.za.com",nocase; classtype:attempted-recon; sid:200022601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.xmigxe.za.com",nocase; classtype:attempted-recon; sid:200022602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.ygrkwy.za.com",nocase; classtype:attempted-recon; sid:200022603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.yjnkya.za.com",nocase; classtype:attempted-recon; sid:200022604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.ylvgii.za.com",nocase; classtype:attempted-recon; sid:200022605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.ymixml.za.com",nocase; classtype:attempted-recon; sid:200022606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.yoltyz.za.com",nocase; classtype:attempted-recon; sid:200022607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.yyciai.za.com",nocase; classtype:attempted-recon; sid:200022608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.zenagx.za.com",nocase; classtype:attempted-recon; sid:200022609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.zhafla.za.com",nocase; classtype:attempted-recon; sid:200022610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.ziqmtw.za.com",nocase; classtype:attempted-recon; sid:200022611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.ziuzyk.za.com",nocase; classtype:attempted-recon; sid:200022612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.zktobi.za.com",nocase; classtype:attempted-recon; sid:200022613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.zlppsf.za.com",nocase; classtype:attempted-recon; sid:200022614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.zrmusc.za.com",nocase; classtype:attempted-recon; sid:200022615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsieecei.viveiaaevesi.zudxug.za.com",nocase; classtype:attempted-recon; sid:200022616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.apoljj.za.com",nocase; classtype:attempted-recon; sid:200022617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.axbhie.za.com",nocase; classtype:attempted-recon; sid:200022618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.cbargn.za.com",nocase; classtype:attempted-recon; sid:200022619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.cnzlue.za.com",nocase; classtype:attempted-recon; sid:200022620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.cpclxs.za.com",nocase; classtype:attempted-recon; sid:200022621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.difkhu.za.com",nocase; classtype:attempted-recon; sid:200022622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.dnjggs.za.com",nocase; classtype:attempted-recon; sid:200022623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.dzniib.za.com",nocase; classtype:attempted-recon; sid:200022624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.epmgtc.za.com",nocase; classtype:attempted-recon; sid:200022625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.fflglh.za.com",nocase; classtype:attempted-recon; sid:200022626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.fjdayb.za.com",nocase; classtype:attempted-recon; sid:200022627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.fmdodt.za.com",nocase; classtype:attempted-recon; sid:200022628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.fmmfcz.za.com",nocase; classtype:attempted-recon; sid:200022629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.frghvs.za.com",nocase; classtype:attempted-recon; sid:200022630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.fthjtm.za.com",nocase; classtype:attempted-recon; sid:200022631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.fyyfxo.za.com",nocase; classtype:attempted-recon; sid:200022632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.gbwdln.za.com",nocase; classtype:attempted-recon; sid:200022633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.gbxbjo.za.com",nocase; classtype:attempted-recon; sid:200022634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.hcnqqk.za.com",nocase; classtype:attempted-recon; sid:200022635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.iezkxp.za.com",nocase; classtype:attempted-recon; sid:200022636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.jdjghn.za.com",nocase; classtype:attempted-recon; sid:200022637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.jygknw.za.com",nocase; classtype:attempted-recon; sid:200022638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.jzemci.za.com",nocase; classtype:attempted-recon; sid:200022639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.lcuqbc.za.com",nocase; classtype:attempted-recon; sid:200022640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.lklgbt.za.com",nocase; classtype:attempted-recon; sid:200022641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.lqonrt.za.com",nocase; classtype:attempted-recon; sid:200022642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.lvuojw.za.com",nocase; classtype:attempted-recon; sid:200022643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.lymdeg.za.com",nocase; classtype:attempted-recon; sid:200022644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.mgfxpv.za.com",nocase; classtype:attempted-recon; sid:200022645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.nkgnxu.za.com",nocase; classtype:attempted-recon; sid:200022646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.nlutye.za.com",nocase; classtype:attempted-recon; sid:200022647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.nqawww.za.com",nocase; classtype:attempted-recon; sid:200022648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.nskxef.za.com",nocase; classtype:attempted-recon; sid:200022649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.nsrsyf.za.com",nocase; classtype:attempted-recon; sid:200022650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.ntmdlo.za.com",nocase; classtype:attempted-recon; sid:200022651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.nyapck.za.com",nocase; classtype:attempted-recon; sid:200022652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.oaimcs.za.com",nocase; classtype:attempted-recon; sid:200022653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.obnjjr.za.com",nocase; classtype:attempted-recon; sid:200022654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.ojabvb.za.com",nocase; classtype:attempted-recon; sid:200022655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.pddjuu.za.com",nocase; classtype:attempted-recon; sid:200022656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.peqrlu.za.com",nocase; classtype:attempted-recon; sid:200022657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.pfkndl.za.com",nocase; classtype:attempted-recon; sid:200022658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.pfxtar.za.com",nocase; classtype:attempted-recon; sid:200022659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.pilzbq.za.com",nocase; classtype:attempted-recon; sid:200022660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.prfshi.za.com",nocase; classtype:attempted-recon; sid:200022661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.pruuwp.za.com",nocase; classtype:attempted-recon; sid:200022662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.pxwxmw.za.com",nocase; classtype:attempted-recon; sid:200022663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.qbkymz.za.com",nocase; classtype:attempted-recon; sid:200022664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.qigckf.za.com",nocase; classtype:attempted-recon; sid:200022665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.qsgdnx.za.com",nocase; classtype:attempted-recon; sid:200022666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.qyoqyz.za.com",nocase; classtype:attempted-recon; sid:200022667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.qytbke.za.com",nocase; classtype:attempted-recon; sid:200022668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.rouqjs.za.com",nocase; classtype:attempted-recon; sid:200022669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.rsxmth.za.com",nocase; classtype:attempted-recon; sid:200022670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.ryogde.za.com",nocase; classtype:attempted-recon; sid:200022671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.sbonjn.za.com",nocase; classtype:attempted-recon; sid:200022672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.sewril.za.com",nocase; classtype:attempted-recon; sid:200022673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.stghfe.za.com",nocase; classtype:attempted-recon; sid:200022674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.taqabm.za.com",nocase; classtype:attempted-recon; sid:200022675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.tfdebx.za.com",nocase; classtype:attempted-recon; sid:200022676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.trzfav.za.com",nocase; classtype:attempted-recon; sid:200022677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.uhdxmb.za.com",nocase; classtype:attempted-recon; sid:200022678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.uktqmo.za.com",nocase; classtype:attempted-recon; sid:200022679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.vhwplz.za.com",nocase; classtype:attempted-recon; sid:200022680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.vixxvg.za.com",nocase; classtype:attempted-recon; sid:200022681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.vjyswj.za.com",nocase; classtype:attempted-recon; sid:200022682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.vmmoue.za.com",nocase; classtype:attempted-recon; sid:200022683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.vnsscq.za.com",nocase; classtype:attempted-recon; sid:200022684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.vtihba.za.com",nocase; classtype:attempted-recon; sid:200022685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.vucabx.za.com",nocase; classtype:attempted-recon; sid:200022686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.vunivt.za.com",nocase; classtype:attempted-recon; sid:200022687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.vusnur.za.com",nocase; classtype:attempted-recon; sid:200022688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.wffxjj.za.com",nocase; classtype:attempted-recon; sid:200022689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.wssjge.za.com",nocase; classtype:attempted-recon; sid:200022690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.wylftw.za.com",nocase; classtype:attempted-recon; sid:200022691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.xioxfp.za.com",nocase; classtype:attempted-recon; sid:200022692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.xmigxe.za.com",nocase; classtype:attempted-recon; sid:200022693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.ygrkwy.za.com",nocase; classtype:attempted-recon; sid:200022694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.yjnkya.za.com",nocase; classtype:attempted-recon; sid:200022695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.ymixml.za.com",nocase; classtype:attempted-recon; sid:200022696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.yoltyz.za.com",nocase; classtype:attempted-recon; sid:200022697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.yyciai.za.com",nocase; classtype:attempted-recon; sid:200022698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.zenagx.za.com",nocase; classtype:attempted-recon; sid:200022699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.zhafla.za.com",nocase; classtype:attempted-recon; sid:200022700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.ziqmtw.za.com",nocase; classtype:attempted-recon; sid:200022701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.ziuzyk.za.com",nocase; classtype:attempted-recon; sid:200022702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.zktobi.za.com",nocase; classtype:attempted-recon; sid:200022703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.zlppsf.za.com",nocase; classtype:attempted-recon; sid:200022704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.zrmusc.za.com",nocase; classtype:attempted-recon; sid:200022705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsievei.vivesiavesi.zudxug.za.com",nocase; classtype:attempted-recon; sid:200022706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.aiinpw.za.com",nocase; classtype:attempted-recon; sid:200022707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.apoljj.za.com",nocase; classtype:attempted-recon; sid:200022708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.axbhie.za.com",nocase; classtype:attempted-recon; sid:200022709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.cbargn.za.com",nocase; classtype:attempted-recon; sid:200022710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.cndiyk.za.com",nocase; classtype:attempted-recon; sid:200022711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.cnzlue.za.com",nocase; classtype:attempted-recon; sid:200022712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.cpclxs.za.com",nocase; classtype:attempted-recon; sid:200022713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.difkhu.za.com",nocase; classtype:attempted-recon; sid:200022714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.dnjggs.za.com",nocase; classtype:attempted-recon; sid:200022715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.dyjnbb.za.com",nocase; classtype:attempted-recon; sid:200022716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.dzniib.za.com",nocase; classtype:attempted-recon; sid:200022717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.epmgtc.za.com",nocase; classtype:attempted-recon; sid:200022718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.fflglh.za.com",nocase; classtype:attempted-recon; sid:200022719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.fjdayb.za.com",nocase; classtype:attempted-recon; sid:200022720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.flydpf.za.com",nocase; classtype:attempted-recon; sid:200022721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.fmdodt.za.com",nocase; classtype:attempted-recon; sid:200022722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.fmmfcz.za.com",nocase; classtype:attempted-recon; sid:200022723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.frghvs.za.com",nocase; classtype:attempted-recon; sid:200022724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.fthjtm.za.com",nocase; classtype:attempted-recon; sid:200022725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.fyyfxo.za.com",nocase; classtype:attempted-recon; sid:200022726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.gbwdln.za.com",nocase; classtype:attempted-recon; sid:200022727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.gbxbjo.za.com",nocase; classtype:attempted-recon; sid:200022728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.hcnqqk.za.com",nocase; classtype:attempted-recon; sid:200022729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.iezkxp.za.com",nocase; classtype:attempted-recon; sid:200022730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.ifpdph.za.com",nocase; classtype:attempted-recon; sid:200022731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.jdjghn.za.com",nocase; classtype:attempted-recon; sid:200022732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.jpxnnz.za.com",nocase; classtype:attempted-recon; sid:200022733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.jygknw.za.com",nocase; classtype:attempted-recon; sid:200022734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.jzemci.za.com",nocase; classtype:attempted-recon; sid:200022735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.kzdaec.za.com",nocase; classtype:attempted-recon; sid:200022736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.lcuqbc.za.com",nocase; classtype:attempted-recon; sid:200022737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.lklgbt.za.com",nocase; classtype:attempted-recon; sid:200022738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.lqonrt.za.com",nocase; classtype:attempted-recon; sid:200022739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.lvuojw.za.com",nocase; classtype:attempted-recon; sid:200022740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.lymdeg.za.com",nocase; classtype:attempted-recon; sid:200022741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.mgfxpv.za.com",nocase; classtype:attempted-recon; sid:200022742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.nkgnxu.za.com",nocase; classtype:attempted-recon; sid:200022743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.nlutye.za.com",nocase; classtype:attempted-recon; sid:200022744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.nqawww.za.com",nocase; classtype:attempted-recon; sid:200022745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.nskxef.za.com",nocase; classtype:attempted-recon; sid:200022746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.nsrsyf.za.com",nocase; classtype:attempted-recon; sid:200022747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.ntmdlo.za.com",nocase; classtype:attempted-recon; sid:200022748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.nyapck.za.com",nocase; classtype:attempted-recon; sid:200022749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.oaimcs.za.com",nocase; classtype:attempted-recon; sid:200022750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.obnjjr.za.com",nocase; classtype:attempted-recon; sid:200022751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.ojabvb.za.com",nocase; classtype:attempted-recon; sid:200022752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.pddjuu.za.com",nocase; classtype:attempted-recon; sid:200022753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.peqrlu.za.com",nocase; classtype:attempted-recon; sid:200022754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.pfkndl.za.com",nocase; classtype:attempted-recon; sid:200022755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.pfxtar.za.com",nocase; classtype:attempted-recon; sid:200022756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.phskmc.za.com",nocase; classtype:attempted-recon; sid:200022757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.pilzbq.za.com",nocase; classtype:attempted-recon; sid:200022758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.prfshi.za.com",nocase; classtype:attempted-recon; sid:200022759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.pruuwp.za.com",nocase; classtype:attempted-recon; sid:200022760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.pxwxmw.za.com",nocase; classtype:attempted-recon; sid:200022761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.qbkymz.za.com",nocase; classtype:attempted-recon; sid:200022762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.qigckf.za.com",nocase; classtype:attempted-recon; sid:200022763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.qsgdnx.za.com",nocase; classtype:attempted-recon; sid:200022764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.qyoqyz.za.com",nocase; classtype:attempted-recon; sid:200022765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.qytbke.za.com",nocase; classtype:attempted-recon; sid:200022766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.rouqjs.za.com",nocase; classtype:attempted-recon; sid:200022767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.rsxmth.za.com",nocase; classtype:attempted-recon; sid:200022768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.ryogde.za.com",nocase; classtype:attempted-recon; sid:200022769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.sbonjn.za.com",nocase; classtype:attempted-recon; sid:200022770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.sewril.za.com",nocase; classtype:attempted-recon; sid:200022771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.stghfe.za.com",nocase; classtype:attempted-recon; sid:200022772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.sznube.za.com",nocase; classtype:attempted-recon; sid:200022773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.taqabm.za.com",nocase; classtype:attempted-recon; sid:200022774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.tfdebx.za.com",nocase; classtype:attempted-recon; sid:200022775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.trzfav.za.com",nocase; classtype:attempted-recon; sid:200022776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.uhdxmb.za.com",nocase; classtype:attempted-recon; sid:200022777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.uktqmo.za.com",nocase; classtype:attempted-recon; sid:200022778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.vhwplz.za.com",nocase; classtype:attempted-recon; sid:200022779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.vixxvg.za.com",nocase; classtype:attempted-recon; sid:200022780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.vjyswj.za.com",nocase; classtype:attempted-recon; sid:200022781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.vmmoue.za.com",nocase; classtype:attempted-recon; sid:200022782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.vtihba.za.com",nocase; classtype:attempted-recon; sid:200022783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.vucabx.za.com",nocase; classtype:attempted-recon; sid:200022784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.vunivt.za.com",nocase; classtype:attempted-recon; sid:200022785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.vusnur.za.com",nocase; classtype:attempted-recon; sid:200022786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.wffxjj.za.com",nocase; classtype:attempted-recon; sid:200022787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.wssjge.za.com",nocase; classtype:attempted-recon; sid:200022788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.wylftw.za.com",nocase; classtype:attempted-recon; sid:200022789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.xioxfp.za.com",nocase; classtype:attempted-recon; sid:200022790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.xmigxe.za.com",nocase; classtype:attempted-recon; sid:200022791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.ygrkwy.za.com",nocase; classtype:attempted-recon; sid:200022792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.yjnkya.za.com",nocase; classtype:attempted-recon; sid:200022793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.ylvgii.za.com",nocase; classtype:attempted-recon; sid:200022794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.ymixml.za.com",nocase; classtype:attempted-recon; sid:200022795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.yoltyz.za.com",nocase; classtype:attempted-recon; sid:200022796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.yyciai.za.com",nocase; classtype:attempted-recon; sid:200022797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.zenagx.za.com",nocase; classtype:attempted-recon; sid:200022798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.zhafla.za.com",nocase; classtype:attempted-recon; sid:200022799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.ziqmtw.za.com",nocase; classtype:attempted-recon; sid:200022800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.ziuzyk.za.com",nocase; classtype:attempted-recon; sid:200022801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.zktobi.za.com",nocase; classtype:attempted-recon; sid:200022802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.zlppsf.za.com",nocase; classtype:attempted-recon; sid:200022803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.zrmusc.za.com",nocase; classtype:attempted-recon; sid:200022804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesecei.vcirveeaaevesi.zudxug.za.com",nocase; classtype:attempted-recon; sid:200022805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.aiinpw.za.com",nocase; classtype:attempted-recon; sid:200022806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.apoljj.za.com",nocase; classtype:attempted-recon; sid:200022807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.axbhie.za.com",nocase; classtype:attempted-recon; sid:200022808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.cbargn.za.com",nocase; classtype:attempted-recon; sid:200022809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.cndiyk.za.com",nocase; classtype:attempted-recon; sid:200022810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.cnzlue.za.com",nocase; classtype:attempted-recon; sid:200022811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.cpclxs.za.com",nocase; classtype:attempted-recon; sid:200022812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.difkhu.za.com",nocase; classtype:attempted-recon; sid:200022813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.dnjggs.za.com",nocase; classtype:attempted-recon; sid:200022814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.dyjnbb.za.com",nocase; classtype:attempted-recon; sid:200022815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.dzniib.za.com",nocase; classtype:attempted-recon; sid:200022816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.epmgtc.za.com",nocase; classtype:attempted-recon; sid:200022817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.fflglh.za.com",nocase; classtype:attempted-recon; sid:200022818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.fjdayb.za.com",nocase; classtype:attempted-recon; sid:200022819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.flydpf.za.com",nocase; classtype:attempted-recon; sid:200022820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.fmdodt.za.com",nocase; classtype:attempted-recon; sid:200022821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.fmmfcz.za.com",nocase; classtype:attempted-recon; sid:200022822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.frghvs.za.com",nocase; classtype:attempted-recon; sid:200022823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.fthjtm.za.com",nocase; classtype:attempted-recon; sid:200022824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.fyyfxo.za.com",nocase; classtype:attempted-recon; sid:200022825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.gbwdln.za.com",nocase; classtype:attempted-recon; sid:200022826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.gbxbjo.za.com",nocase; classtype:attempted-recon; sid:200022827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.hcnqqk.za.com",nocase; classtype:attempted-recon; sid:200022828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.iezkxp.za.com",nocase; classtype:attempted-recon; sid:200022829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.ifpdph.za.com",nocase; classtype:attempted-recon; sid:200022830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.jdjghn.za.com",nocase; classtype:attempted-recon; sid:200022831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.jpxnnz.za.com",nocase; classtype:attempted-recon; sid:200022832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.jygknw.za.com",nocase; classtype:attempted-recon; sid:200022833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.jzemci.za.com",nocase; classtype:attempted-recon; sid:200022834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.kzdaec.za.com",nocase; classtype:attempted-recon; sid:200022835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.lcuqbc.za.com",nocase; classtype:attempted-recon; sid:200022836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.lklgbt.za.com",nocase; classtype:attempted-recon; sid:200022837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.lqonrt.za.com",nocase; classtype:attempted-recon; sid:200022838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.lvuojw.za.com",nocase; classtype:attempted-recon; sid:200022839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.lymdeg.za.com",nocase; classtype:attempted-recon; sid:200022840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.mgfxpv.za.com",nocase; classtype:attempted-recon; sid:200022841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.nkgnxu.za.com",nocase; classtype:attempted-recon; sid:200022842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.nlutye.za.com",nocase; classtype:attempted-recon; sid:200022843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.nqawww.za.com",nocase; classtype:attempted-recon; sid:200022844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.nskxef.za.com",nocase; classtype:attempted-recon; sid:200022845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.nsrsyf.za.com",nocase; classtype:attempted-recon; sid:200022846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.ntmdlo.za.com",nocase; classtype:attempted-recon; sid:200022847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.nyapck.za.com",nocase; classtype:attempted-recon; sid:200022848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.oaimcs.za.com",nocase; classtype:attempted-recon; sid:200022849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.obnjjr.za.com",nocase; classtype:attempted-recon; sid:200022850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.ojabvb.za.com",nocase; classtype:attempted-recon; sid:200022851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.pddjuu.za.com",nocase; classtype:attempted-recon; sid:200022852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.peqrlu.za.com",nocase; classtype:attempted-recon; sid:200022853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.pfkndl.za.com",nocase; classtype:attempted-recon; sid:200022854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.pfxtar.za.com",nocase; classtype:attempted-recon; sid:200022855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.phskmc.za.com",nocase; classtype:attempted-recon; sid:200022856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.pilzbq.za.com",nocase; classtype:attempted-recon; sid:200022857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.prfshi.za.com",nocase; classtype:attempted-recon; sid:200022858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.pruuwp.za.com",nocase; classtype:attempted-recon; sid:200022859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.pxwxmw.za.com",nocase; classtype:attempted-recon; sid:200022860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.qbkymz.za.com",nocase; classtype:attempted-recon; sid:200022861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.qigckf.za.com",nocase; classtype:attempted-recon; sid:200022862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.qsgdnx.za.com",nocase; classtype:attempted-recon; sid:200022863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.qyoqyz.za.com",nocase; classtype:attempted-recon; sid:200022864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.qytbke.za.com",nocase; classtype:attempted-recon; sid:200022865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.rouqjs.za.com",nocase; classtype:attempted-recon; sid:200022866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.rsxmth.za.com",nocase; classtype:attempted-recon; sid:200022867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.ryogde.za.com",nocase; classtype:attempted-recon; sid:200022868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.sbonjn.za.com",nocase; classtype:attempted-recon; sid:200022869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.sewril.za.com",nocase; classtype:attempted-recon; sid:200022870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.stghfe.za.com",nocase; classtype:attempted-recon; sid:200022871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.sznube.za.com",nocase; classtype:attempted-recon; sid:200022872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.taqabm.za.com",nocase; classtype:attempted-recon; sid:200022873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.tfdebx.za.com",nocase; classtype:attempted-recon; sid:200022874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.trzfav.za.com",nocase; classtype:attempted-recon; sid:200022875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.uhdxmb.za.com",nocase; classtype:attempted-recon; sid:200022876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.uktqmo.za.com",nocase; classtype:attempted-recon; sid:200022877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.vhwplz.za.com",nocase; classtype:attempted-recon; sid:200022878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.vixxvg.za.com",nocase; classtype:attempted-recon; sid:200022879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.vjyswj.za.com",nocase; classtype:attempted-recon; sid:200022880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.vmmoue.za.com",nocase; classtype:attempted-recon; sid:200022881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.vnsscq.za.com",nocase; classtype:attempted-recon; sid:200022882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.vtihba.za.com",nocase; classtype:attempted-recon; sid:200022883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.vucabx.za.com",nocase; classtype:attempted-recon; sid:200022884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.vunivt.za.com",nocase; classtype:attempted-recon; sid:200022885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.vusnur.za.com",nocase; classtype:attempted-recon; sid:200022886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.wffxjj.za.com",nocase; classtype:attempted-recon; sid:200022887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.wssjge.za.com",nocase; classtype:attempted-recon; sid:200022888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.wylftw.za.com",nocase; classtype:attempted-recon; sid:200022889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.xioxfp.za.com",nocase; classtype:attempted-recon; sid:200022890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.xmigxe.za.com",nocase; classtype:attempted-recon; sid:200022891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.ygrkwy.za.com",nocase; classtype:attempted-recon; sid:200022892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.yjnkya.za.com",nocase; classtype:attempted-recon; sid:200022893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.ylvgii.za.com",nocase; classtype:attempted-recon; sid:200022894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.ymixml.za.com",nocase; classtype:attempted-recon; sid:200022895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.yoltyz.za.com",nocase; classtype:attempted-recon; sid:200022896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.yyciai.za.com",nocase; classtype:attempted-recon; sid:200022897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.zenagx.za.com",nocase; classtype:attempted-recon; sid:200022898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.zhafla.za.com",nocase; classtype:attempted-recon; sid:200022899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.ziqmtw.za.com",nocase; classtype:attempted-recon; sid:200022900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.ziuzyk.za.com",nocase; classtype:attempted-recon; sid:200022901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.zktobi.za.com",nocase; classtype:attempted-recon; sid:200022902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.zlppsf.za.com",nocase; classtype:attempted-recon; sid:200022903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.zrmusc.za.com",nocase; classtype:attempted-recon; sid:200022904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreesvei.vicvreesavesi.zudxug.za.com",nocase; classtype:attempted-recon; sid:200022905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.exrjwh.top",nocase; classtype:attempted-recon; sid:200022906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.exxnjv.top",nocase; classtype:attempted-recon; sid:200022907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.fbgnzp.top",nocase; classtype:attempted-recon; sid:200022908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.fgmlde.top",nocase; classtype:attempted-recon; sid:200022909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.fiwzrb.top",nocase; classtype:attempted-recon; sid:200022910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.fpezfd.top",nocase; classtype:attempted-recon; sid:200022911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.fprrlq.top",nocase; classtype:attempted-recon; sid:200022912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.frhyqg.top",nocase; classtype:attempted-recon; sid:200022913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.fshxqm.top",nocase; classtype:attempted-recon; sid:200022914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.fynqxp.top",nocase; classtype:attempted-recon; sid:200022915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.fzcftf.top",nocase; classtype:attempted-recon; sid:200022916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.gbbxdr.top",nocase; classtype:attempted-recon; sid:200022917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.ghdbbh.top",nocase; classtype:attempted-recon; sid:200022918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.grliwz.top",nocase; classtype:attempted-recon; sid:200022919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.gtfvze.top",nocase; classtype:attempted-recon; sid:200022920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.guxqvw.top",nocase; classtype:attempted-recon; sid:200022921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.gyaexz.top",nocase; classtype:attempted-recon; sid:200022922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.hgpqys.top",nocase; classtype:attempted-recon; sid:200022923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.hhksfr.top",nocase; classtype:attempted-recon; sid:200022924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.iktggq.top",nocase; classtype:attempted-recon; sid:200022925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.ilgzng.top",nocase; classtype:attempted-recon; sid:200022926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.ilpzgr.top",nocase; classtype:attempted-recon; sid:200022927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.irllcd.top",nocase; classtype:attempted-recon; sid:200022928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.iuruyp.top",nocase; classtype:attempted-recon; sid:200022929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.jdjubw.top",nocase; classtype:attempted-recon; sid:200022930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.jfmfyj.top",nocase; classtype:attempted-recon; sid:200022931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.jubsfg.top",nocase; classtype:attempted-recon; sid:200022932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.jxavqz.top",nocase; classtype:attempted-recon; sid:200022933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.jxsfsm.top",nocase; classtype:attempted-recon; sid:200022934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.klgjib.top",nocase; classtype:attempted-recon; sid:200022935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.klvjnr.top",nocase; classtype:attempted-recon; sid:200022936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.kqdghn.top",nocase; classtype:attempted-recon; sid:200022937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.kqstye.top",nocase; classtype:attempted-recon; sid:200022938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.ksdadl.top",nocase; classtype:attempted-recon; sid:200022939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.kvtvic.top",nocase; classtype:attempted-recon; sid:200022940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.kxcepn.top",nocase; classtype:attempted-recon; sid:200022941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.laeyhc.top",nocase; classtype:attempted-recon; sid:200022942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.lhewuf.top",nocase; classtype:attempted-recon; sid:200022943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.ljsifw.top",nocase; classtype:attempted-recon; sid:200022944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.lrtzrp.top",nocase; classtype:attempted-recon; sid:200022945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.lsztbg.top",nocase; classtype:attempted-recon; sid:200022946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.ltineb.top",nocase; classtype:attempted-recon; sid:200022947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.lwxxqk.top",nocase; classtype:attempted-recon; sid:200022948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.mcbprf.top",nocase; classtype:attempted-recon; sid:200022949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.mdaxpz.top",nocase; classtype:attempted-recon; sid:200022950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.mddqbt.top",nocase; classtype:attempted-recon; sid:200022951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.mgandi.top",nocase; classtype:attempted-recon; sid:200022952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.mhgmuo.top",nocase; classtype:attempted-recon; sid:200022953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.mhnved.top",nocase; classtype:attempted-recon; sid:200022954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.mhxoyr.top",nocase; classtype:attempted-recon; sid:200022955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.mmcqln.top",nocase; classtype:attempted-recon; sid:200022956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.munzdr.top",nocase; classtype:attempted-recon; sid:200022957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.mwquzc.top",nocase; classtype:attempted-recon; sid:200022958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.mzrkkc.top",nocase; classtype:attempted-recon; sid:200022959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.najkys.top",nocase; classtype:attempted-recon; sid:200022960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.nbhlvc.top",nocase; classtype:attempted-recon; sid:200022961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.neidee.top",nocase; classtype:attempted-recon; sid:200022962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.ngtwxt.top",nocase; classtype:attempted-recon; sid:200022963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.njhpgs.top",nocase; classtype:attempted-recon; sid:200022964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.nmbqjh.top",nocase; classtype:attempted-recon; sid:200022965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.nxuiqz.top",nocase; classtype:attempted-recon; sid:200022966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.nyzjio.top",nocase; classtype:attempted-recon; sid:200022967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.ofburn.top",nocase; classtype:attempted-recon; sid:200022968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.ohmatb.top",nocase; classtype:attempted-recon; sid:200022969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.ojvntr.top",nocase; classtype:attempted-recon; sid:200022970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.opyxhy.top",nocase; classtype:attempted-recon; sid:200022971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.osqsyc.top",nocase; classtype:attempted-recon; sid:200022972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.owqbbi.top",nocase; classtype:attempted-recon; sid:200022973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.oycpxz.top",nocase; classtype:attempted-recon; sid:200022974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.pbkjie.top",nocase; classtype:attempted-recon; sid:200022975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.pdndft.top",nocase; classtype:attempted-recon; sid:200022976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.pgltrg.top",nocase; classtype:attempted-recon; sid:200022977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.pgwcxp.top",nocase; classtype:attempted-recon; sid:200022978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.plqjhl.top",nocase; classtype:attempted-recon; sid:200022979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.pqpcgk.top",nocase; classtype:attempted-recon; sid:200022980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.pxnctk.top",nocase; classtype:attempted-recon; sid:200022981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.pyseum.top",nocase; classtype:attempted-recon; sid:200022982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.pysitg.top",nocase; classtype:attempted-recon; sid:200022983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.qboxjl.top",nocase; classtype:attempted-recon; sid:200022984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.qjtfvg.top",nocase; classtype:attempted-recon; sid:200022985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.qnomqo.top",nocase; classtype:attempted-recon; sid:200022986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.qwudnh.top",nocase; classtype:attempted-recon; sid:200022987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.rataxm.top",nocase; classtype:attempted-recon; sid:200022988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.rchahv.top",nocase; classtype:attempted-recon; sid:200022989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.rhwdsq.top",nocase; classtype:attempted-recon; sid:200022990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.rjfbqi.top",nocase; classtype:attempted-recon; sid:200022991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.exrjwh.top",nocase; classtype:attempted-recon; sid:200022992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.exxnjv.top",nocase; classtype:attempted-recon; sid:200022993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.fbgnzp.top",nocase; classtype:attempted-recon; sid:200022994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.fgmlde.top",nocase; classtype:attempted-recon; sid:200022995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.fiwzrb.top",nocase; classtype:attempted-recon; sid:200022996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.fpezfd.top",nocase; classtype:attempted-recon; sid:200022997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.fprrlq.top",nocase; classtype:attempted-recon; sid:200022998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.frhyqg.top",nocase; classtype:attempted-recon; sid:200022999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.fshxqm.top",nocase; classtype:attempted-recon; sid:200023000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.fynqxp.top",nocase; classtype:attempted-recon; sid:200023001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.fzcftf.top",nocase; classtype:attempted-recon; sid:200023002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.ghdbbh.top",nocase; classtype:attempted-recon; sid:200023003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.ghqphy.top",nocase; classtype:attempted-recon; sid:200023004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.gjrbgg.top",nocase; classtype:attempted-recon; sid:200023005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.grliwz.top",nocase; classtype:attempted-recon; sid:200023006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.gtfvze.top",nocase; classtype:attempted-recon; sid:200023007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.guxqvw.top",nocase; classtype:attempted-recon; sid:200023008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.gyaexz.top",nocase; classtype:attempted-recon; sid:200023009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.hgpqys.top",nocase; classtype:attempted-recon; sid:200023010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.hhksfr.top",nocase; classtype:attempted-recon; sid:200023011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.iktggq.top",nocase; classtype:attempted-recon; sid:200023012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.ilgzng.top",nocase; classtype:attempted-recon; sid:200023013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.ilpzgr.top",nocase; classtype:attempted-recon; sid:200023014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.irllcd.top",nocase; classtype:attempted-recon; sid:200023015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.iuruyp.top",nocase; classtype:attempted-recon; sid:200023016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.jdjubw.top",nocase; classtype:attempted-recon; sid:200023017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.jfmfyj.top",nocase; classtype:attempted-recon; sid:200023018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.jubsfg.top",nocase; classtype:attempted-recon; sid:200023019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.jxavqz.top",nocase; classtype:attempted-recon; sid:200023020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.jxsfsm.top",nocase; classtype:attempted-recon; sid:200023021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.klgjib.top",nocase; classtype:attempted-recon; sid:200023022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.klvjnr.top",nocase; classtype:attempted-recon; sid:200023023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.kqdghn.top",nocase; classtype:attempted-recon; sid:200023024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.kqstye.top",nocase; classtype:attempted-recon; sid:200023025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.ksdadl.top",nocase; classtype:attempted-recon; sid:200023026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.laeyhc.top",nocase; classtype:attempted-recon; sid:200023027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.lhewuf.top",nocase; classtype:attempted-recon; sid:200023028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.ljsifw.top",nocase; classtype:attempted-recon; sid:200023029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.lrtzrp.top",nocase; classtype:attempted-recon; sid:200023030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.lsztbg.top",nocase; classtype:attempted-recon; sid:200023031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.ltineb.top",nocase; classtype:attempted-recon; sid:200023032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.mcbprf.top",nocase; classtype:attempted-recon; sid:200023033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.mdaxpz.top",nocase; classtype:attempted-recon; sid:200023034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.mddqbt.top",nocase; classtype:attempted-recon; sid:200023035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.mgandi.top",nocase; classtype:attempted-recon; sid:200023036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.mhgmuo.top",nocase; classtype:attempted-recon; sid:200023037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.mhnved.top",nocase; classtype:attempted-recon; sid:200023038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.mhxoyr.top",nocase; classtype:attempted-recon; sid:200023039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.mmcqln.top",nocase; classtype:attempted-recon; sid:200023040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.munzdr.top",nocase; classtype:attempted-recon; sid:200023041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.mwquzc.top",nocase; classtype:attempted-recon; sid:200023042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.mzrkkc.top",nocase; classtype:attempted-recon; sid:200023043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.najkys.top",nocase; classtype:attempted-recon; sid:200023044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.nbhlvc.top",nocase; classtype:attempted-recon; sid:200023045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.neidee.top",nocase; classtype:attempted-recon; sid:200023046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.ngtwxt.top",nocase; classtype:attempted-recon; sid:200023047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.nmbqjh.top",nocase; classtype:attempted-recon; sid:200023048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.ntlhha.top",nocase; classtype:attempted-recon; sid:200023049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.nxuiqz.top",nocase; classtype:attempted-recon; sid:200023050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.nyzjio.top",nocase; classtype:attempted-recon; sid:200023051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.ofburn.top",nocase; classtype:attempted-recon; sid:200023052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.ohmatb.top",nocase; classtype:attempted-recon; sid:200023053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.ojvntr.top",nocase; classtype:attempted-recon; sid:200023054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.opyxhy.top",nocase; classtype:attempted-recon; sid:200023055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.osqsyc.top",nocase; classtype:attempted-recon; sid:200023056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.pbkjie.top",nocase; classtype:attempted-recon; sid:200023057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.pgltrg.top",nocase; classtype:attempted-recon; sid:200023058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.pgwcxp.top",nocase; classtype:attempted-recon; sid:200023059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.plqjhl.top",nocase; classtype:attempted-recon; sid:200023060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.poaixv.top",nocase; classtype:attempted-recon; sid:200023061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.pqpcgk.top",nocase; classtype:attempted-recon; sid:200023062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.pwnccs.top",nocase; classtype:attempted-recon; sid:200023063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.pxnctk.top",nocase; classtype:attempted-recon; sid:200023064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.pyseum.top",nocase; classtype:attempted-recon; sid:200023065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.pysitg.top",nocase; classtype:attempted-recon; sid:200023066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.qjtfvg.top",nocase; classtype:attempted-recon; sid:200023067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.qnomqo.top",nocase; classtype:attempted-recon; sid:200023068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.rataxm.top",nocase; classtype:attempted-recon; sid:200023069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.rchahv.top",nocase; classtype:attempted-recon; sid:200023070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.rhirhw.top",nocase; classtype:attempted-recon; sid:200023071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.rjfbqi.top",nocase; classtype:attempted-recon; sid:200023072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.rkafro.top",nocase; classtype:attempted-recon; sid:200023073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.exrjwh.top",nocase; classtype:attempted-recon; sid:200023074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.exxnjv.top",nocase; classtype:attempted-recon; sid:200023075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.fbgnzp.top",nocase; classtype:attempted-recon; sid:200023076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.fgmlde.top",nocase; classtype:attempted-recon; sid:200023077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.fiwzrb.top",nocase; classtype:attempted-recon; sid:200023078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.fprrlq.top",nocase; classtype:attempted-recon; sid:200023079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.frhyqg.top",nocase; classtype:attempted-recon; sid:200023080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.fshxqm.top",nocase; classtype:attempted-recon; sid:200023081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.fynqxp.top",nocase; classtype:attempted-recon; sid:200023082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.fzcftf.top",nocase; classtype:attempted-recon; sid:200023083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.gbbxdr.top",nocase; classtype:attempted-recon; sid:200023084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.ghdbbh.top",nocase; classtype:attempted-recon; sid:200023085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.ghqphy.top",nocase; classtype:attempted-recon; sid:200023086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.gjrbgg.top",nocase; classtype:attempted-recon; sid:200023087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.grliwz.top",nocase; classtype:attempted-recon; sid:200023088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.guxqvw.top",nocase; classtype:attempted-recon; sid:200023089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.hgpqys.top",nocase; classtype:attempted-recon; sid:200023090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.hhksfr.top",nocase; classtype:attempted-recon; sid:200023091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.iktggq.top",nocase; classtype:attempted-recon; sid:200023092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.ilgzng.top",nocase; classtype:attempted-recon; sid:200023093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.ilpzgr.top",nocase; classtype:attempted-recon; sid:200023094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.irllcd.top",nocase; classtype:attempted-recon; sid:200023095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.iuruyp.top",nocase; classtype:attempted-recon; sid:200023096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.jdjubw.top",nocase; classtype:attempted-recon; sid:200023097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.jfmfyj.top",nocase; classtype:attempted-recon; sid:200023098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.jubsfg.top",nocase; classtype:attempted-recon; sid:200023099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.klgjib.top",nocase; classtype:attempted-recon; sid:200023100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.klvjnr.top",nocase; classtype:attempted-recon; sid:200023101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.kqdghn.top",nocase; classtype:attempted-recon; sid:200023102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.kqstye.top",nocase; classtype:attempted-recon; sid:200023103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.kvtvic.top",nocase; classtype:attempted-recon; sid:200023104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.kxcepn.top",nocase; classtype:attempted-recon; sid:200023105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.laeyhc.top",nocase; classtype:attempted-recon; sid:200023106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.lhewuf.top",nocase; classtype:attempted-recon; sid:200023107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.ljsifw.top",nocase; classtype:attempted-recon; sid:200023108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.lrtzrp.top",nocase; classtype:attempted-recon; sid:200023109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.lsztbg.top",nocase; classtype:attempted-recon; sid:200023110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.ltineb.top",nocase; classtype:attempted-recon; sid:200023111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.lwxxqk.top",nocase; classtype:attempted-recon; sid:200023112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.mcbprf.top",nocase; classtype:attempted-recon; sid:200023113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.mdaxpz.top",nocase; classtype:attempted-recon; sid:200023114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.mddqbt.top",nocase; classtype:attempted-recon; sid:200023115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.mgandi.top",nocase; classtype:attempted-recon; sid:200023116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.mhgmuo.top",nocase; classtype:attempted-recon; sid:200023117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.mhnved.top",nocase; classtype:attempted-recon; sid:200023118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.mhxoyr.top",nocase; classtype:attempted-recon; sid:200023119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.mravkx.top",nocase; classtype:attempted-recon; sid:200023120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.munzdr.top",nocase; classtype:attempted-recon; sid:200023121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.mwquzc.top",nocase; classtype:attempted-recon; sid:200023122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.mzrkkc.top",nocase; classtype:attempted-recon; sid:200023123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.najkys.top",nocase; classtype:attempted-recon; sid:200023124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.nbhlvc.top",nocase; classtype:attempted-recon; sid:200023125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.neidee.top",nocase; classtype:attempted-recon; sid:200023126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.ngtwxt.top",nocase; classtype:attempted-recon; sid:200023127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.njhpgs.top",nocase; classtype:attempted-recon; sid:200023128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.nmbqjh.top",nocase; classtype:attempted-recon; sid:200023129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.ntlhha.top",nocase; classtype:attempted-recon; sid:200023130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.nyzjio.top",nocase; classtype:attempted-recon; sid:200023131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.ofburn.top",nocase; classtype:attempted-recon; sid:200023132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.ohmatb.top",nocase; classtype:attempted-recon; sid:200023133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.ojvntr.top",nocase; classtype:attempted-recon; sid:200023134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.opyxhy.top",nocase; classtype:attempted-recon; sid:200023135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.osqsyc.top",nocase; classtype:attempted-recon; sid:200023136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.owqbbi.top",nocase; classtype:attempted-recon; sid:200023137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.oycpxz.top",nocase; classtype:attempted-recon; sid:200023138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.pdndft.top",nocase; classtype:attempted-recon; sid:200023139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.pgltrg.top",nocase; classtype:attempted-recon; sid:200023140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.pgwcxp.top",nocase; classtype:attempted-recon; sid:200023141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.plqjhl.top",nocase; classtype:attempted-recon; sid:200023142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.poaixv.top",nocase; classtype:attempted-recon; sid:200023143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.pqpcgk.top",nocase; classtype:attempted-recon; sid:200023144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.pwnccs.top",nocase; classtype:attempted-recon; sid:200023145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.pxnctk.top",nocase; classtype:attempted-recon; sid:200023146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.pyseum.top",nocase; classtype:attempted-recon; sid:200023147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.pysitg.top",nocase; classtype:attempted-recon; sid:200023148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.qboxjl.top",nocase; classtype:attempted-recon; sid:200023149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.qjtfvg.top",nocase; classtype:attempted-recon; sid:200023150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.qnomqo.top",nocase; classtype:attempted-recon; sid:200023151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.qwudnh.top",nocase; classtype:attempted-recon; sid:200023152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.rataxm.top",nocase; classtype:attempted-recon; sid:200023153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.rchahv.top",nocase; classtype:attempted-recon; sid:200023154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.rhwdsq.top",nocase; classtype:attempted-recon; sid:200023155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.rjfbqi.top",nocase; classtype:attempted-recon; sid:200023156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.rkafro.top",nocase; classtype:attempted-recon; sid:200023157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.fbgnzp.top",nocase; classtype:attempted-recon; sid:200023158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.fgmlde.top",nocase; classtype:attempted-recon; sid:200023159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.fiwzrb.top",nocase; classtype:attempted-recon; sid:200023160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.fpezfd.top",nocase; classtype:attempted-recon; sid:200023161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.fprrlq.top",nocase; classtype:attempted-recon; sid:200023162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.fshxqm.top",nocase; classtype:attempted-recon; sid:200023163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.fynqxp.top",nocase; classtype:attempted-recon; sid:200023164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.fzcftf.top",nocase; classtype:attempted-recon; sid:200023165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.fzfweo.top",nocase; classtype:attempted-recon; sid:200023166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.gbbxdr.top",nocase; classtype:attempted-recon; sid:200023167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.ghdbbh.top",nocase; classtype:attempted-recon; sid:200023168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.ghqphy.top",nocase; classtype:attempted-recon; sid:200023169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.gjrbgg.top",nocase; classtype:attempted-recon; sid:200023170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.grliwz.top",nocase; classtype:attempted-recon; sid:200023171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.gtfvze.top",nocase; classtype:attempted-recon; sid:200023172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.guxqvw.top",nocase; classtype:attempted-recon; sid:200023173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.gyaexz.top",nocase; classtype:attempted-recon; sid:200023174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.hgpqys.top",nocase; classtype:attempted-recon; sid:200023175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.hhksfr.top",nocase; classtype:attempted-recon; sid:200023176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.iktggq.top",nocase; classtype:attempted-recon; sid:200023177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.ilgzng.top",nocase; classtype:attempted-recon; sid:200023178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.ilpzgr.top",nocase; classtype:attempted-recon; sid:200023179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.irllcd.top",nocase; classtype:attempted-recon; sid:200023180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.iuruyp.top",nocase; classtype:attempted-recon; sid:200023181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.jdjubw.top",nocase; classtype:attempted-recon; sid:200023182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.jfmfyj.top",nocase; classtype:attempted-recon; sid:200023183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.jubsfg.top",nocase; classtype:attempted-recon; sid:200023184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.jxavqz.top",nocase; classtype:attempted-recon; sid:200023185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.jxsfsm.top",nocase; classtype:attempted-recon; sid:200023186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.klgjib.top",nocase; classtype:attempted-recon; sid:200023187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.klvjnr.top",nocase; classtype:attempted-recon; sid:200023188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.kqdghn.top",nocase; classtype:attempted-recon; sid:200023189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.kqstye.top",nocase; classtype:attempted-recon; sid:200023190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.ksdadl.top",nocase; classtype:attempted-recon; sid:200023191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.kvtvic.top",nocase; classtype:attempted-recon; sid:200023192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.laeyhc.top",nocase; classtype:attempted-recon; sid:200023193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.lhewuf.top",nocase; classtype:attempted-recon; sid:200023194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.ljsifw.top",nocase; classtype:attempted-recon; sid:200023195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.lrtzrp.top",nocase; classtype:attempted-recon; sid:200023196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.lsztbg.top",nocase; classtype:attempted-recon; sid:200023197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.ltineb.top",nocase; classtype:attempted-recon; sid:200023198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.lwxxqk.top",nocase; classtype:attempted-recon; sid:200023199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.mcbprf.top",nocase; classtype:attempted-recon; sid:200023200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.mdaxpz.top",nocase; classtype:attempted-recon; sid:200023201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.mhgmuo.top",nocase; classtype:attempted-recon; sid:200023202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.mhnved.top",nocase; classtype:attempted-recon; sid:200023203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.mhxoyr.top",nocase; classtype:attempted-recon; sid:200023204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.mmcqln.top",nocase; classtype:attempted-recon; sid:200023205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.mravkx.top",nocase; classtype:attempted-recon; sid:200023206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.munzdr.top",nocase; classtype:attempted-recon; sid:200023207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.mwquzc.top",nocase; classtype:attempted-recon; sid:200023208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.mzrkkc.top",nocase; classtype:attempted-recon; sid:200023209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.najkys.top",nocase; classtype:attempted-recon; sid:200023210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.neidee.top",nocase; classtype:attempted-recon; sid:200023211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.njhpgs.top",nocase; classtype:attempted-recon; sid:200023212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.nmbqjh.top",nocase; classtype:attempted-recon; sid:200023213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.ntlhha.top",nocase; classtype:attempted-recon; sid:200023214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.nxuiqz.top",nocase; classtype:attempted-recon; sid:200023215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.nyzjio.top",nocase; classtype:attempted-recon; sid:200023216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.ojvntr.top",nocase; classtype:attempted-recon; sid:200023217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.opyxhy.top",nocase; classtype:attempted-recon; sid:200023218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.osqsyc.top",nocase; classtype:attempted-recon; sid:200023219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.owqbbi.top",nocase; classtype:attempted-recon; sid:200023220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.oycpxz.top",nocase; classtype:attempted-recon; sid:200023221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.pbkjie.top",nocase; classtype:attempted-recon; sid:200023222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.pdndft.top",nocase; classtype:attempted-recon; sid:200023223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.pgltrg.top",nocase; classtype:attempted-recon; sid:200023224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.plqjhl.top",nocase; classtype:attempted-recon; sid:200023225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.poaixv.top",nocase; classtype:attempted-recon; sid:200023226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.pqpcgk.top",nocase; classtype:attempted-recon; sid:200023227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.pwnccs.top",nocase; classtype:attempted-recon; sid:200023228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.pxnctk.top",nocase; classtype:attempted-recon; sid:200023229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.pyseum.top",nocase; classtype:attempted-recon; sid:200023230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.pysitg.top",nocase; classtype:attempted-recon; sid:200023231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.qboxjl.top",nocase; classtype:attempted-recon; sid:200023232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.qjtfvg.top",nocase; classtype:attempted-recon; sid:200023233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.qnomqo.top",nocase; classtype:attempted-recon; sid:200023234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.qwudnh.top",nocase; classtype:attempted-recon; sid:200023235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.rataxm.top",nocase; classtype:attempted-recon; sid:200023236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.rchahv.top",nocase; classtype:attempted-recon; sid:200023237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.rhirhw.top",nocase; classtype:attempted-recon; sid:200023238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.rhwdsq.top",nocase; classtype:attempted-recon; sid:200023239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.rjfbqi.top",nocase; classtype:attempted-recon; sid:200023240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.rkafro.top",nocase; classtype:attempted-recon; sid:200023241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.exrjwh.top",nocase; classtype:attempted-recon; sid:200023242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.fbgnzp.top",nocase; classtype:attempted-recon; sid:200023243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.fgmlde.top",nocase; classtype:attempted-recon; sid:200023244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.fiwzrb.top",nocase; classtype:attempted-recon; sid:200023245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.fpezfd.top",nocase; classtype:attempted-recon; sid:200023246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.fprrlq.top",nocase; classtype:attempted-recon; sid:200023247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.frhyqg.top",nocase; classtype:attempted-recon; sid:200023248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.fshxqm.top",nocase; classtype:attempted-recon; sid:200023249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.fynqxp.top",nocase; classtype:attempted-recon; sid:200023250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.fzcftf.top",nocase; classtype:attempted-recon; sid:200023251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.fzfweo.top",nocase; classtype:attempted-recon; sid:200023252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.gjrbgg.top",nocase; classtype:attempted-recon; sid:200023253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.gtfvze.top",nocase; classtype:attempted-recon; sid:200023254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.guxqvw.top",nocase; classtype:attempted-recon; sid:200023255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.gyaexz.top",nocase; classtype:attempted-recon; sid:200023256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.hgpqys.top",nocase; classtype:attempted-recon; sid:200023257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.iktggq.top",nocase; classtype:attempted-recon; sid:200023258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.ilgzng.top",nocase; classtype:attempted-recon; sid:200023259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.ilpzgr.top",nocase; classtype:attempted-recon; sid:200023260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.irllcd.top",nocase; classtype:attempted-recon; sid:200023261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.iuruyp.top",nocase; classtype:attempted-recon; sid:200023262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.jdjubw.top",nocase; classtype:attempted-recon; sid:200023263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.jfmfyj.top",nocase; classtype:attempted-recon; sid:200023264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.jubsfg.top",nocase; classtype:attempted-recon; sid:200023265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.jxavqz.top",nocase; classtype:attempted-recon; sid:200023266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.jxsfsm.top",nocase; classtype:attempted-recon; sid:200023267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.klgjib.top",nocase; classtype:attempted-recon; sid:200023268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.kqdghn.top",nocase; classtype:attempted-recon; sid:200023269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.kqstye.top",nocase; classtype:attempted-recon; sid:200023270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.kvtvic.top",nocase; classtype:attempted-recon; sid:200023271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.kxcepn.top",nocase; classtype:attempted-recon; sid:200023272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.laeyhc.top",nocase; classtype:attempted-recon; sid:200023273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.lhewuf.top",nocase; classtype:attempted-recon; sid:200023274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.ljsifw.top",nocase; classtype:attempted-recon; sid:200023275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.lrtzrp.top",nocase; classtype:attempted-recon; sid:200023276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.lsztbg.top",nocase; classtype:attempted-recon; sid:200023277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.ltineb.top",nocase; classtype:attempted-recon; sid:200023278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.lwxxqk.top",nocase; classtype:attempted-recon; sid:200023279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.mcbprf.top",nocase; classtype:attempted-recon; sid:200023280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.mdaxpz.top",nocase; classtype:attempted-recon; sid:200023281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.mddqbt.top",nocase; classtype:attempted-recon; sid:200023282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.mgandi.top",nocase; classtype:attempted-recon; sid:200023283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.mhgmuo.top",nocase; classtype:attempted-recon; sid:200023284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.mhnved.top",nocase; classtype:attempted-recon; sid:200023285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.mhxoyr.top",nocase; classtype:attempted-recon; sid:200023286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.mmcqln.top",nocase; classtype:attempted-recon; sid:200023287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.mravkx.top",nocase; classtype:attempted-recon; sid:200023288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.munzdr.top",nocase; classtype:attempted-recon; sid:200023289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.mwquzc.top",nocase; classtype:attempted-recon; sid:200023290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.mzrkkc.top",nocase; classtype:attempted-recon; sid:200023291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.najkys.top",nocase; classtype:attempted-recon; sid:200023292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.nbhlvc.top",nocase; classtype:attempted-recon; sid:200023293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.neidee.top",nocase; classtype:attempted-recon; sid:200023294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.ngtwxt.top",nocase; classtype:attempted-recon; sid:200023295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.njhpgs.top",nocase; classtype:attempted-recon; sid:200023296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.nmbqjh.top",nocase; classtype:attempted-recon; sid:200023297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.ntlhha.top",nocase; classtype:attempted-recon; sid:200023298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.nyzjio.top",nocase; classtype:attempted-recon; sid:200023299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.ofburn.top",nocase; classtype:attempted-recon; sid:200023300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.ohmatb.top",nocase; classtype:attempted-recon; sid:200023301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.ojvntr.top",nocase; classtype:attempted-recon; sid:200023302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.opyxhy.top",nocase; classtype:attempted-recon; sid:200023303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.osqsyc.top",nocase; classtype:attempted-recon; sid:200023304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.owqbbi.top",nocase; classtype:attempted-recon; sid:200023305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.oycpxz.top",nocase; classtype:attempted-recon; sid:200023306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.pdndft.top",nocase; classtype:attempted-recon; sid:200023307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.pgltrg.top",nocase; classtype:attempted-recon; sid:200023308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.pgwcxp.top",nocase; classtype:attempted-recon; sid:200023309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.plqjhl.top",nocase; classtype:attempted-recon; sid:200023310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.poaixv.top",nocase; classtype:attempted-recon; sid:200023311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.pqpcgk.top",nocase; classtype:attempted-recon; sid:200023312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.pwnccs.top",nocase; classtype:attempted-recon; sid:200023313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.pxnctk.top",nocase; classtype:attempted-recon; sid:200023314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.pyseum.top",nocase; classtype:attempted-recon; sid:200023315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.pysitg.top",nocase; classtype:attempted-recon; sid:200023316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.qboxjl.top",nocase; classtype:attempted-recon; sid:200023317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.qjtfvg.top",nocase; classtype:attempted-recon; sid:200023318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.qnomqo.top",nocase; classtype:attempted-recon; sid:200023319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.qwudnh.top",nocase; classtype:attempted-recon; sid:200023320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.rataxm.top",nocase; classtype:attempted-recon; sid:200023321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.rchahv.top",nocase; classtype:attempted-recon; sid:200023322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.rhirhw.top",nocase; classtype:attempted-recon; sid:200023323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.rhwdsq.top",nocase; classtype:attempted-recon; sid:200023324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.rjfbqi.top",nocase; classtype:attempted-recon; sid:200023325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.rkafro.top",nocase; classtype:attempted-recon; sid:200023326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.exrjwh.top",nocase; classtype:attempted-recon; sid:200023327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.exxnjv.top",nocase; classtype:attempted-recon; sid:200023328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.fbgnzp.top",nocase; classtype:attempted-recon; sid:200023329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.fgmlde.top",nocase; classtype:attempted-recon; sid:200023330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.fpezfd.top",nocase; classtype:attempted-recon; sid:200023331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.fprrlq.top",nocase; classtype:attempted-recon; sid:200023332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.frhyqg.top",nocase; classtype:attempted-recon; sid:200023333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.fshxqm.top",nocase; classtype:attempted-recon; sid:200023334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.fynqxp.top",nocase; classtype:attempted-recon; sid:200023335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.fzcftf.top",nocase; classtype:attempted-recon; sid:200023336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.fzfweo.top",nocase; classtype:attempted-recon; sid:200023337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.gbbxdr.top",nocase; classtype:attempted-recon; sid:200023338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.ghdbbh.top",nocase; classtype:attempted-recon; sid:200023339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.ghqphy.top",nocase; classtype:attempted-recon; sid:200023340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.gjrbgg.top",nocase; classtype:attempted-recon; sid:200023341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.grliwz.top",nocase; classtype:attempted-recon; sid:200023342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.gtfvze.top",nocase; classtype:attempted-recon; sid:200023343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.guxqvw.top",nocase; classtype:attempted-recon; sid:200023344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.gyaexz.top",nocase; classtype:attempted-recon; sid:200023345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.hgpqys.top",nocase; classtype:attempted-recon; sid:200023346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.hhksfr.top",nocase; classtype:attempted-recon; sid:200023347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.iktggq.top",nocase; classtype:attempted-recon; sid:200023348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.ilgzng.top",nocase; classtype:attempted-recon; sid:200023349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.irllcd.top",nocase; classtype:attempted-recon; sid:200023350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.iuruyp.top",nocase; classtype:attempted-recon; sid:200023351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.jdjubw.top",nocase; classtype:attempted-recon; sid:200023352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.jfmfyj.top",nocase; classtype:attempted-recon; sid:200023353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.jubsfg.top",nocase; classtype:attempted-recon; sid:200023354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.jxavqz.top",nocase; classtype:attempted-recon; sid:200023355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.jxsfsm.top",nocase; classtype:attempted-recon; sid:200023356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.klgjib.top",nocase; classtype:attempted-recon; sid:200023357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.klvjnr.top",nocase; classtype:attempted-recon; sid:200023358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.kqdghn.top",nocase; classtype:attempted-recon; sid:200023359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.kqstye.top",nocase; classtype:attempted-recon; sid:200023360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.ksdadl.top",nocase; classtype:attempted-recon; sid:200023361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.kvtvic.top",nocase; classtype:attempted-recon; sid:200023362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.kxcepn.top",nocase; classtype:attempted-recon; sid:200023363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.laeyhc.top",nocase; classtype:attempted-recon; sid:200023364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.lhewuf.top",nocase; classtype:attempted-recon; sid:200023365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.lrtzrp.top",nocase; classtype:attempted-recon; sid:200023366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.lsztbg.top",nocase; classtype:attempted-recon; sid:200023367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.ltineb.top",nocase; classtype:attempted-recon; sid:200023368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.lwxxqk.top",nocase; classtype:attempted-recon; sid:200023369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.mdaxpz.top",nocase; classtype:attempted-recon; sid:200023370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.mddqbt.top",nocase; classtype:attempted-recon; sid:200023371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.mgandi.top",nocase; classtype:attempted-recon; sid:200023372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.mhgmuo.top",nocase; classtype:attempted-recon; sid:200023373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.mhnved.top",nocase; classtype:attempted-recon; sid:200023374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.mmcqln.top",nocase; classtype:attempted-recon; sid:200023375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.munzdr.top",nocase; classtype:attempted-recon; sid:200023376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.mwquzc.top",nocase; classtype:attempted-recon; sid:200023377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.najkys.top",nocase; classtype:attempted-recon; sid:200023378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.nbhlvc.top",nocase; classtype:attempted-recon; sid:200023379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.neidee.top",nocase; classtype:attempted-recon; sid:200023380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.ngtwxt.top",nocase; classtype:attempted-recon; sid:200023381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.njhpgs.top",nocase; classtype:attempted-recon; sid:200023382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.nmbqjh.top",nocase; classtype:attempted-recon; sid:200023383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.ntlhha.top",nocase; classtype:attempted-recon; sid:200023384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.nxuiqz.top",nocase; classtype:attempted-recon; sid:200023385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.nyzjio.top",nocase; classtype:attempted-recon; sid:200023386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.ofburn.top",nocase; classtype:attempted-recon; sid:200023387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.ohmatb.top",nocase; classtype:attempted-recon; sid:200023388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.ojvntr.top",nocase; classtype:attempted-recon; sid:200023389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.osqsyc.top",nocase; classtype:attempted-recon; sid:200023390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.owqbbi.top",nocase; classtype:attempted-recon; sid:200023391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.oycpxz.top",nocase; classtype:attempted-recon; sid:200023392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.pbkjie.top",nocase; classtype:attempted-recon; sid:200023393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.pdndft.top",nocase; classtype:attempted-recon; sid:200023394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.pgltrg.top",nocase; classtype:attempted-recon; sid:200023395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.pgwcxp.top",nocase; classtype:attempted-recon; sid:200023396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.poaixv.top",nocase; classtype:attempted-recon; sid:200023397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.pqpcgk.top",nocase; classtype:attempted-recon; sid:200023398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.pwnccs.top",nocase; classtype:attempted-recon; sid:200023399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.pxnctk.top",nocase; classtype:attempted-recon; sid:200023400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.pyseum.top",nocase; classtype:attempted-recon; sid:200023401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.qboxjl.top",nocase; classtype:attempted-recon; sid:200023402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.qnomqo.top",nocase; classtype:attempted-recon; sid:200023403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.qwudnh.top",nocase; classtype:attempted-recon; sid:200023404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.rataxm.top",nocase; classtype:attempted-recon; sid:200023405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.rchahv.top",nocase; classtype:attempted-recon; sid:200023406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.rhwdsq.top",nocase; classtype:attempted-recon; sid:200023407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.rjfbqi.top",nocase; classtype:attempted-recon; sid:200023408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.rkafro.top",nocase; classtype:attempted-recon; sid:200023409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.02vk.top",nocase; classtype:attempted-recon; sid:200023410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200023411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.afevzf.top",nocase; classtype:attempted-recon; sid:200023412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200023413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200023414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200023415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.balaet.icu",nocase; classtype:attempted-recon; sid:200023416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200023417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200023418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200023419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.bporry.top",nocase; classtype:attempted-recon; sid:200023420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.bspybm.top",nocase; classtype:attempted-recon; sid:200023421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200023422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200023423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200023424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.cntxao.top",nocase; classtype:attempted-recon; sid:200023425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.coflya.top",nocase; classtype:attempted-recon; sid:200023426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200023427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.craycraft.top",nocase; classtype:attempted-recon; sid:200023428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.cwadib.top",nocase; classtype:attempted-recon; sid:200023429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200023430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200023431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.dauexk.top",nocase; classtype:attempted-recon; sid:200023432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200023433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200023434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200023435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200023436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200023437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200023438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200023439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200023440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.elhicw.top",nocase; classtype:attempted-recon; sid:200023441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200023442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200023443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200023444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200023445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200023446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200023447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200023448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200023449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200023450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200023451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200023452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.iooazb.top",nocase; classtype:attempted-recon; sid:200023453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200023454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200023455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200023456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200023457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.kpblio.top",nocase; classtype:attempted-recon; sid:200023458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.lenorv.top",nocase; classtype:attempted-recon; sid:200023459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200023460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200023461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200023462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200023463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200023464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200023465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200023466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200023467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200023468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.ronipp.top",nocase; classtype:attempted-recon; sid:200023469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200023470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200023471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200023472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200023473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200023474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200023475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.shaot.icu",nocase; classtype:attempted-recon; sid:200023476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200023477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200023478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200023479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200023480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200023481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.ufihby.top",nocase; classtype:attempted-recon; sid:200023482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.upuphone.group",nocase; classtype:attempted-recon; sid:200023483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200023484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.urekwh.top",nocase; classtype:attempted-recon; sid:200023485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200023486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.vozep.icu",nocase; classtype:attempted-recon; sid:200023487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200023488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.wbziul.top",nocase; classtype:attempted-recon; sid:200023489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200023490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.wetot.life",nocase; classtype:attempted-recon; sid:200023491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200023492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.wingfh.top",nocase; classtype:attempted-recon; sid:200023493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200023494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200023495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200023496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200023497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200023498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.xudixq.top",nocase; classtype:attempted-recon; sid:200023499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200023500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200023501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200023502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200023503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200023504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200023505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200023506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200023507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.znegsr.top",nocase; classtype:attempted-recon; sid:200023508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.zynepg.top",nocase; classtype:attempted-recon; sid:200023509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.02vk.top",nocase; classtype:attempted-recon; sid:200023510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200023511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.afevzf.top",nocase; classtype:attempted-recon; sid:200023512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200023513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200023514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200023515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.balaet.icu",nocase; classtype:attempted-recon; sid:200023516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200023517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200023518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200023519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.bporry.top",nocase; classtype:attempted-recon; sid:200023520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200023521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200023522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200023523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200023524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.cntxao.top",nocase; classtype:attempted-recon; sid:200023525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.coflya.top",nocase; classtype:attempted-recon; sid:200023526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200023527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.craycraft.top",nocase; classtype:attempted-recon; sid:200023528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.cwadib.top",nocase; classtype:attempted-recon; sid:200023529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200023530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200023531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200023532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200023533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200023534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200023535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200023536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200023537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200023538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200023539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.elhicw.top",nocase; classtype:attempted-recon; sid:200023540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200023541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200023542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200023543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200023544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200023545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200023546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200023547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200023548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200023549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200023550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200023551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.iooazb.top",nocase; classtype:attempted-recon; sid:200023552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200023553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200023554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200023555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200023556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.kpblio.top",nocase; classtype:attempted-recon; sid:200023557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.lenorv.top",nocase; classtype:attempted-recon; sid:200023558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200023559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200023560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200023561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200023562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200023563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.pkilix.top",nocase; classtype:attempted-recon; sid:200023564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200023565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200023566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200023567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200023568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.ronipp.top",nocase; classtype:attempted-recon; sid:200023569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200023570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200023571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200023572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200023573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200023574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.shaot.icu",nocase; classtype:attempted-recon; sid:200023575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200023576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200023577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200023578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200023579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200023580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200023581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.ufihby.top",nocase; classtype:attempted-recon; sid:200023582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.upuphone.group",nocase; classtype:attempted-recon; sid:200023583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200023584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.urekwh.top",nocase; classtype:attempted-recon; sid:200023585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200023586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.vozep.icu",nocase; classtype:attempted-recon; sid:200023587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200023588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.wbziul.top",nocase; classtype:attempted-recon; sid:200023589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200023590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.wetot.icu",nocase; classtype:attempted-recon; sid:200023591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200023592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.wingfh.top",nocase; classtype:attempted-recon; sid:200023593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200023594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200023595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200023596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200023597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200023598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.xudixq.top",nocase; classtype:attempted-recon; sid:200023599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200023600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200023601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200023602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.yavkol.top",nocase; classtype:attempted-recon; sid:200023603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200023604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200023605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200023606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200023607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200023608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200023609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.znegsr.top",nocase; classtype:attempted-recon; sid:200023610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.zynepg.top",nocase; classtype:attempted-recon; sid:200023611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.02vk.top",nocase; classtype:attempted-recon; sid:200023612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200023613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200023614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200023615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200023616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200023617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200023618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.bporry.top",nocase; classtype:attempted-recon; sid:200023619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200023620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200023621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200023622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200023623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200023624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.cntxao.top",nocase; classtype:attempted-recon; sid:200023625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.coflya.top",nocase; classtype:attempted-recon; sid:200023626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200023627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.craycraft.top",nocase; classtype:attempted-recon; sid:200023628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.cwadib.top",nocase; classtype:attempted-recon; sid:200023629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200023630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.dauexk.top",nocase; classtype:attempted-recon; sid:200023631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200023632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200023633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200023634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200023635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200023636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200023637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200023638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200023639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200023640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.elhicw.top",nocase; classtype:attempted-recon; sid:200023641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200023642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200023643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200023644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.exoysm.top",nocase; classtype:attempted-recon; sid:200023645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200023646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200023647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200023648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200023649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200023650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200023651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200023652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.iooazb.top",nocase; classtype:attempted-recon; sid:200023653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200023654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200023655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200023656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200023657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.kpblio.top",nocase; classtype:attempted-recon; sid:200023658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.lenorv.top",nocase; classtype:attempted-recon; sid:200023659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200023660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200023661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200023662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200023663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200023664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.pkilix.top",nocase; classtype:attempted-recon; sid:200023665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200023666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200023667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200023668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200023669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.ronipp.top",nocase; classtype:attempted-recon; sid:200023670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200023671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200023672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200023673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200023674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200023675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200023676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.shaot.icu",nocase; classtype:attempted-recon; sid:200023677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200023678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200023679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200023680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200023681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200023682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200023683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.ufihby.top",nocase; classtype:attempted-recon; sid:200023684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.upuphone.group",nocase; classtype:attempted-recon; sid:200023685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200023686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.urekwh.top",nocase; classtype:attempted-recon; sid:200023687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200023688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.vozep.icu",nocase; classtype:attempted-recon; sid:200023689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200023690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.wbziul.top",nocase; classtype:attempted-recon; sid:200023691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200023692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200023693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.wetot.icu",nocase; classtype:attempted-recon; sid:200023694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.wetot.life",nocase; classtype:attempted-recon; sid:200023695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200023696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.wingfh.top",nocase; classtype:attempted-recon; sid:200023697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200023698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200023699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200023700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200023701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200023702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.xudixq.top",nocase; classtype:attempted-recon; sid:200023703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200023704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200023705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.yavkol.top",nocase; classtype:attempted-recon; sid:200023706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200023707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200023708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200023709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200023710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200023711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200023712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.znegsr.top",nocase; classtype:attempted-recon; sid:200023713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.zynepg.top",nocase; classtype:attempted-recon; sid:200023714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.02vk.top",nocase; classtype:attempted-recon; sid:200023715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200023716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.afevzf.top",nocase; classtype:attempted-recon; sid:200023717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200023718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200023719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200023720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.balaet.icu",nocase; classtype:attempted-recon; sid:200023721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200023722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200023723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200023724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.bporry.top",nocase; classtype:attempted-recon; sid:200023725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.bspybm.top",nocase; classtype:attempted-recon; sid:200023726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200023727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200023728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200023729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200023730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200023731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.cntxao.top",nocase; classtype:attempted-recon; sid:200023732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200023733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.craycraft.top",nocase; classtype:attempted-recon; sid:200023734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.cwadib.top",nocase; classtype:attempted-recon; sid:200023735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200023736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200023737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.dauexk.top",nocase; classtype:attempted-recon; sid:200023738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200023739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200023740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200023741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200023742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200023743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200023744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200023745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200023746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.elhicw.top",nocase; classtype:attempted-recon; sid:200023747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200023748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200023749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200023750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.exoysm.top",nocase; classtype:attempted-recon; sid:200023751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200023752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200023753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200023754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200023755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200023756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200023757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200023758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.iooazb.top",nocase; classtype:attempted-recon; sid:200023759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200023760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200023761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200023762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.kpblio.top",nocase; classtype:attempted-recon; sid:200023763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.lenorv.top",nocase; classtype:attempted-recon; sid:200023764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200023765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200023766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200023767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200023768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.pkilix.top",nocase; classtype:attempted-recon; sid:200023769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200023770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200023771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200023772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.ronipp.top",nocase; classtype:attempted-recon; sid:200023773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200023774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200023775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200023776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200023777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200023778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.shaot.icu",nocase; classtype:attempted-recon; sid:200023779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200023780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200023781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200023782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200023783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200023784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200023785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.ufihby.top",nocase; classtype:attempted-recon; sid:200023786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.upuphone.group",nocase; classtype:attempted-recon; sid:200023787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200023788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200023789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.vozep.icu",nocase; classtype:attempted-recon; sid:200023790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200023791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.wbziul.top",nocase; classtype:attempted-recon; sid:200023792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200023793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200023794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.wetot.icu",nocase; classtype:attempted-recon; sid:200023795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.wetot.life",nocase; classtype:attempted-recon; sid:200023796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200023797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200023798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200023799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200023800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200023801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.xudixq.top",nocase; classtype:attempted-recon; sid:200023802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200023803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200023804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200023805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.yavkol.top",nocase; classtype:attempted-recon; sid:200023806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200023807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200023808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200023809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200023810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200023811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200023812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.znegsr.top",nocase; classtype:attempted-recon; sid:200023813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.zynepg.top",nocase; classtype:attempted-recon; sid:200023814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.aiinpw.za.com",nocase; classtype:attempted-recon; sid:200023815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.apoljj.za.com",nocase; classtype:attempted-recon; sid:200023816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.axbhie.za.com",nocase; classtype:attempted-recon; sid:200023817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.cbargn.za.com",nocase; classtype:attempted-recon; sid:200023818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.cndiyk.za.com",nocase; classtype:attempted-recon; sid:200023819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.cnzlue.za.com",nocase; classtype:attempted-recon; sid:200023820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.cpclxs.za.com",nocase; classtype:attempted-recon; sid:200023821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.difkhu.za.com",nocase; classtype:attempted-recon; sid:200023822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.dnjggs.za.com",nocase; classtype:attempted-recon; sid:200023823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.dyjnbb.za.com",nocase; classtype:attempted-recon; sid:200023824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.dzniib.za.com",nocase; classtype:attempted-recon; sid:200023825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.epmgtc.za.com",nocase; classtype:attempted-recon; sid:200023826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.fflglh.za.com",nocase; classtype:attempted-recon; sid:200023827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.fmdodt.za.com",nocase; classtype:attempted-recon; sid:200023828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.frghvs.za.com",nocase; classtype:attempted-recon; sid:200023829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.fthjtm.za.com",nocase; classtype:attempted-recon; sid:200023830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.fyyfxo.za.com",nocase; classtype:attempted-recon; sid:200023831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.gbwdln.za.com",nocase; classtype:attempted-recon; sid:200023832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.gbxbjo.za.com",nocase; classtype:attempted-recon; sid:200023833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.hcnqqk.za.com",nocase; classtype:attempted-recon; sid:200023834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.iezkxp.za.com",nocase; classtype:attempted-recon; sid:200023835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.ifpdph.za.com",nocase; classtype:attempted-recon; sid:200023836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.jdjghn.za.com",nocase; classtype:attempted-recon; sid:200023837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.jpxnnz.za.com",nocase; classtype:attempted-recon; sid:200023838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.jygknw.za.com",nocase; classtype:attempted-recon; sid:200023839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.jzemci.za.com",nocase; classtype:attempted-recon; sid:200023840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.kzdaec.za.com",nocase; classtype:attempted-recon; sid:200023841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.lcuqbc.za.com",nocase; classtype:attempted-recon; sid:200023842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.lklgbt.za.com",nocase; classtype:attempted-recon; sid:200023843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.lvuojw.za.com",nocase; classtype:attempted-recon; sid:200023844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.mgfxpv.za.com",nocase; classtype:attempted-recon; sid:200023845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.nkgnxu.za.com",nocase; classtype:attempted-recon; sid:200023846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.nlutye.za.com",nocase; classtype:attempted-recon; sid:200023847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.nqawww.za.com",nocase; classtype:attempted-recon; sid:200023848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.nskxef.za.com",nocase; classtype:attempted-recon; sid:200023849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.nsrsyf.za.com",nocase; classtype:attempted-recon; sid:200023850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.ntmdlo.za.com",nocase; classtype:attempted-recon; sid:200023851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.nyapck.za.com",nocase; classtype:attempted-recon; sid:200023852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.oaimcs.za.com",nocase; classtype:attempted-recon; sid:200023853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.obnjjr.za.com",nocase; classtype:attempted-recon; sid:200023854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.ojabvb.za.com",nocase; classtype:attempted-recon; sid:200023855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.pddjuu.za.com",nocase; classtype:attempted-recon; sid:200023856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.peqrlu.za.com",nocase; classtype:attempted-recon; sid:200023857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.pfkndl.za.com",nocase; classtype:attempted-recon; sid:200023858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.pfxtar.za.com",nocase; classtype:attempted-recon; sid:200023859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.prfshi.za.com",nocase; classtype:attempted-recon; sid:200023860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.pruuwp.za.com",nocase; classtype:attempted-recon; sid:200023861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.pxwxmw.za.com",nocase; classtype:attempted-recon; sid:200023862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.qbkymz.za.com",nocase; classtype:attempted-recon; sid:200023863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.qigckf.za.com",nocase; classtype:attempted-recon; sid:200023864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.qsgdnx.za.com",nocase; classtype:attempted-recon; sid:200023865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.qyoqyz.za.com",nocase; classtype:attempted-recon; sid:200023866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.qytbke.za.com",nocase; classtype:attempted-recon; sid:200023867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.rouqjs.za.com",nocase; classtype:attempted-recon; sid:200023868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.rsxmth.za.com",nocase; classtype:attempted-recon; sid:200023869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.ryogde.za.com",nocase; classtype:attempted-recon; sid:200023870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.sbonjn.za.com",nocase; classtype:attempted-recon; sid:200023871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.sewril.za.com",nocase; classtype:attempted-recon; sid:200023872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.stghfe.za.com",nocase; classtype:attempted-recon; sid:200023873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.sznube.za.com",nocase; classtype:attempted-recon; sid:200023874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.taqabm.za.com",nocase; classtype:attempted-recon; sid:200023875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.tfdebx.za.com",nocase; classtype:attempted-recon; sid:200023876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.trzfav.za.com",nocase; classtype:attempted-recon; sid:200023877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.uhdxmb.za.com",nocase; classtype:attempted-recon; sid:200023878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.vixxvg.za.com",nocase; classtype:attempted-recon; sid:200023879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.vjyswj.za.com",nocase; classtype:attempted-recon; sid:200023880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.vmmoue.za.com",nocase; classtype:attempted-recon; sid:200023881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.vnsscq.za.com",nocase; classtype:attempted-recon; sid:200023882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.vtihba.za.com",nocase; classtype:attempted-recon; sid:200023883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.vucabx.za.com",nocase; classtype:attempted-recon; sid:200023884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.vusnur.za.com",nocase; classtype:attempted-recon; sid:200023885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.wylftw.za.com",nocase; classtype:attempted-recon; sid:200023886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.xioxfp.za.com",nocase; classtype:attempted-recon; sid:200023887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.xmigxe.za.com",nocase; classtype:attempted-recon; sid:200023888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.ygrkwy.za.com",nocase; classtype:attempted-recon; sid:200023889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.yjnkya.za.com",nocase; classtype:attempted-recon; sid:200023890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.ylvgii.za.com",nocase; classtype:attempted-recon; sid:200023891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.ymixml.za.com",nocase; classtype:attempted-recon; sid:200023892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.yoltyz.za.com",nocase; classtype:attempted-recon; sid:200023893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.yyciai.za.com",nocase; classtype:attempted-recon; sid:200023894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsciveci.vivseiaveesi.zenagx.za.com",nocase; classtype:attempted-recon; sid:200023895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.exrjwh.top",nocase; classtype:attempted-recon; sid:200023896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.exxnjv.top",nocase; classtype:attempted-recon; sid:200023897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.fbgnzp.top",nocase; classtype:attempted-recon; sid:200023898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.fgmlde.top",nocase; classtype:attempted-recon; sid:200023899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.fiwzrb.top",nocase; classtype:attempted-recon; sid:200023900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.fpezfd.top",nocase; classtype:attempted-recon; sid:200023901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.fprrlq.top",nocase; classtype:attempted-recon; sid:200023902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.frhyqg.top",nocase; classtype:attempted-recon; sid:200023903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.fshxqm.top",nocase; classtype:attempted-recon; sid:200023904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.fynqxp.top",nocase; classtype:attempted-recon; sid:200023905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.fzcftf.top",nocase; classtype:attempted-recon; sid:200023906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.fzfweo.top",nocase; classtype:attempted-recon; sid:200023907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.gbbxdr.top",nocase; classtype:attempted-recon; sid:200023908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.ghdbbh.top",nocase; classtype:attempted-recon; sid:200023909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.ghqphy.top",nocase; classtype:attempted-recon; sid:200023910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.gjrbgg.top",nocase; classtype:attempted-recon; sid:200023911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.gtfvze.top",nocase; classtype:attempted-recon; sid:200023912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.guxqvw.top",nocase; classtype:attempted-recon; sid:200023913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.gyaexz.top",nocase; classtype:attempted-recon; sid:200023914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.hgpqys.top",nocase; classtype:attempted-recon; sid:200023915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.iktggq.top",nocase; classtype:attempted-recon; sid:200023916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.ilgzng.top",nocase; classtype:attempted-recon; sid:200023917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.ilpzgr.top",nocase; classtype:attempted-recon; sid:200023918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.irllcd.top",nocase; classtype:attempted-recon; sid:200023919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.iuruyp.top",nocase; classtype:attempted-recon; sid:200023920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.jdjubw.top",nocase; classtype:attempted-recon; sid:200023921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.jfmfyj.top",nocase; classtype:attempted-recon; sid:200023922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.jubsfg.top",nocase; classtype:attempted-recon; sid:200023923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.jxavqz.top",nocase; classtype:attempted-recon; sid:200023924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.jxsfsm.top",nocase; classtype:attempted-recon; sid:200023925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.klgjib.top",nocase; classtype:attempted-recon; sid:200023926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.klvjnr.top",nocase; classtype:attempted-recon; sid:200023927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.kqdghn.top",nocase; classtype:attempted-recon; sid:200023928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.kqstye.top",nocase; classtype:attempted-recon; sid:200023929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.ksdadl.top",nocase; classtype:attempted-recon; sid:200023930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.kvtvic.top",nocase; classtype:attempted-recon; sid:200023931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.kxcepn.top",nocase; classtype:attempted-recon; sid:200023932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.lhewuf.top",nocase; classtype:attempted-recon; sid:200023933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.ljsifw.top",nocase; classtype:attempted-recon; sid:200023934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.lrtzrp.top",nocase; classtype:attempted-recon; sid:200023935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.lsztbg.top",nocase; classtype:attempted-recon; sid:200023936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.lwxxqk.top",nocase; classtype:attempted-recon; sid:200023937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.mcbprf.top",nocase; classtype:attempted-recon; sid:200023938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.mdaxpz.top",nocase; classtype:attempted-recon; sid:200023939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.mddqbt.top",nocase; classtype:attempted-recon; sid:200023940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.mgandi.top",nocase; classtype:attempted-recon; sid:200023941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.mhgmuo.top",nocase; classtype:attempted-recon; sid:200023942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.mhnved.top",nocase; classtype:attempted-recon; sid:200023943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.mmcqln.top",nocase; classtype:attempted-recon; sid:200023944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.mravkx.top",nocase; classtype:attempted-recon; sid:200023945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.mwquzc.top",nocase; classtype:attempted-recon; sid:200023946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.mzrkkc.top",nocase; classtype:attempted-recon; sid:200023947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.nbhlvc.top",nocase; classtype:attempted-recon; sid:200023948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.neidee.top",nocase; classtype:attempted-recon; sid:200023949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.ngtwxt.top",nocase; classtype:attempted-recon; sid:200023950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.njhpgs.top",nocase; classtype:attempted-recon; sid:200023951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.nmbqjh.top",nocase; classtype:attempted-recon; sid:200023952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.ntlhha.top",nocase; classtype:attempted-recon; sid:200023953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.nxuiqz.top",nocase; classtype:attempted-recon; sid:200023954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.nyzjio.top",nocase; classtype:attempted-recon; sid:200023955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.ohmatb.top",nocase; classtype:attempted-recon; sid:200023956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.opyxhy.top",nocase; classtype:attempted-recon; sid:200023957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.osqsyc.top",nocase; classtype:attempted-recon; sid:200023958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.oycpxz.top",nocase; classtype:attempted-recon; sid:200023959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.pdndft.top",nocase; classtype:attempted-recon; sid:200023960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.pgltrg.top",nocase; classtype:attempted-recon; sid:200023961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.pgwcxp.top",nocase; classtype:attempted-recon; sid:200023962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.plqjhl.top",nocase; classtype:attempted-recon; sid:200023963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.poaixv.top",nocase; classtype:attempted-recon; sid:200023964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.pqpcgk.top",nocase; classtype:attempted-recon; sid:200023965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.pwnccs.top",nocase; classtype:attempted-recon; sid:200023966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.pxnctk.top",nocase; classtype:attempted-recon; sid:200023967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.pyseum.top",nocase; classtype:attempted-recon; sid:200023968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.pysitg.top",nocase; classtype:attempted-recon; sid:200023969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.qboxjl.top",nocase; classtype:attempted-recon; sid:200023970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.qnomqo.top",nocase; classtype:attempted-recon; sid:200023971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.qwudnh.top",nocase; classtype:attempted-recon; sid:200023972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.rataxm.top",nocase; classtype:attempted-recon; sid:200023973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.rchahv.top",nocase; classtype:attempted-recon; sid:200023974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.rhirhw.top",nocase; classtype:attempted-recon; sid:200023975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.rhwdsq.top",nocase; classtype:attempted-recon; sid:200023976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.rjfbqi.top",nocase; classtype:attempted-recon; sid:200023977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.rkafro.top",nocase; classtype:attempted-recon; sid:200023978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.exrjwh.top",nocase; classtype:attempted-recon; sid:200023979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.exxnjv.top",nocase; classtype:attempted-recon; sid:200023980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.fbgnzp.top",nocase; classtype:attempted-recon; sid:200023981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.fiwzrb.top",nocase; classtype:attempted-recon; sid:200023982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.fpezfd.top",nocase; classtype:attempted-recon; sid:200023983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.fprrlq.top",nocase; classtype:attempted-recon; sid:200023984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.frhyqg.top",nocase; classtype:attempted-recon; sid:200023985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.fshxqm.top",nocase; classtype:attempted-recon; sid:200023986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.fynqxp.top",nocase; classtype:attempted-recon; sid:200023987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.fzcftf.top",nocase; classtype:attempted-recon; sid:200023988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.fzfweo.top",nocase; classtype:attempted-recon; sid:200023989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.ghdbbh.top",nocase; classtype:attempted-recon; sid:200023990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.ghqphy.top",nocase; classtype:attempted-recon; sid:200023991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.gjrbgg.top",nocase; classtype:attempted-recon; sid:200023992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.guxqvw.top",nocase; classtype:attempted-recon; sid:200023993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.hgpqys.top",nocase; classtype:attempted-recon; sid:200023994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.hhksfr.top",nocase; classtype:attempted-recon; sid:200023995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.iktggq.top",nocase; classtype:attempted-recon; sid:200023996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.ilgzng.top",nocase; classtype:attempted-recon; sid:200023997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.ilpzgr.top",nocase; classtype:attempted-recon; sid:200023998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.irllcd.top",nocase; classtype:attempted-recon; sid:200023999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.iuruyp.top",nocase; classtype:attempted-recon; sid:200024000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.jdjubw.top",nocase; classtype:attempted-recon; sid:200024001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.jxavqz.top",nocase; classtype:attempted-recon; sid:200024002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.jxsfsm.top",nocase; classtype:attempted-recon; sid:200024003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.klgjib.top",nocase; classtype:attempted-recon; sid:200024004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.klvjnr.top",nocase; classtype:attempted-recon; sid:200024005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.kqdghn.top",nocase; classtype:attempted-recon; sid:200024006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.kqstye.top",nocase; classtype:attempted-recon; sid:200024007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.ksdadl.top",nocase; classtype:attempted-recon; sid:200024008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.kvtvic.top",nocase; classtype:attempted-recon; sid:200024009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.kxcepn.top",nocase; classtype:attempted-recon; sid:200024010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.laeyhc.top",nocase; classtype:attempted-recon; sid:200024011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.lhewuf.top",nocase; classtype:attempted-recon; sid:200024012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.ljsifw.top",nocase; classtype:attempted-recon; sid:200024013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.lsztbg.top",nocase; classtype:attempted-recon; sid:200024014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.ltineb.top",nocase; classtype:attempted-recon; sid:200024015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.lwxxqk.top",nocase; classtype:attempted-recon; sid:200024016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.mcbprf.top",nocase; classtype:attempted-recon; sid:200024017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.mddqbt.top",nocase; classtype:attempted-recon; sid:200024018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.mgandi.top",nocase; classtype:attempted-recon; sid:200024019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.mhgmuo.top",nocase; classtype:attempted-recon; sid:200024020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.mhnved.top",nocase; classtype:attempted-recon; sid:200024021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.mhxoyr.top",nocase; classtype:attempted-recon; sid:200024022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.mmcqln.top",nocase; classtype:attempted-recon; sid:200024023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.mravkx.top",nocase; classtype:attempted-recon; sid:200024024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.munzdr.top",nocase; classtype:attempted-recon; sid:200024025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.mwquzc.top",nocase; classtype:attempted-recon; sid:200024026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.mzrkkc.top",nocase; classtype:attempted-recon; sid:200024027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.najkys.top",nocase; classtype:attempted-recon; sid:200024028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.nbhlvc.top",nocase; classtype:attempted-recon; sid:200024029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.ngtwxt.top",nocase; classtype:attempted-recon; sid:200024030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.njhpgs.top",nocase; classtype:attempted-recon; sid:200024031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.nmbqjh.top",nocase; classtype:attempted-recon; sid:200024032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.ntlhha.top",nocase; classtype:attempted-recon; sid:200024033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.nxuiqz.top",nocase; classtype:attempted-recon; sid:200024034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.nyzjio.top",nocase; classtype:attempted-recon; sid:200024035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.ofburn.top",nocase; classtype:attempted-recon; sid:200024036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.ojvntr.top",nocase; classtype:attempted-recon; sid:200024037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.osqsyc.top",nocase; classtype:attempted-recon; sid:200024038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.owqbbi.top",nocase; classtype:attempted-recon; sid:200024039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.oycpxz.top",nocase; classtype:attempted-recon; sid:200024040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.pbkjie.top",nocase; classtype:attempted-recon; sid:200024041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.pdndft.top",nocase; classtype:attempted-recon; sid:200024042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.pgltrg.top",nocase; classtype:attempted-recon; sid:200024043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.pgwcxp.top",nocase; classtype:attempted-recon; sid:200024044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.plqjhl.top",nocase; classtype:attempted-recon; sid:200024045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.poaixv.top",nocase; classtype:attempted-recon; sid:200024046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.pqpcgk.top",nocase; classtype:attempted-recon; sid:200024047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.pwnccs.top",nocase; classtype:attempted-recon; sid:200024048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.pxnctk.top",nocase; classtype:attempted-recon; sid:200024049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.pyseum.top",nocase; classtype:attempted-recon; sid:200024050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.pysitg.top",nocase; classtype:attempted-recon; sid:200024051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.qboxjl.top",nocase; classtype:attempted-recon; sid:200024052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.qjtfvg.top",nocase; classtype:attempted-recon; sid:200024053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.qnomqo.top",nocase; classtype:attempted-recon; sid:200024054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.qwudnh.top",nocase; classtype:attempted-recon; sid:200024055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.rataxm.top",nocase; classtype:attempted-recon; sid:200024056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.rchahv.top",nocase; classtype:attempted-recon; sid:200024057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.rhirhw.top",nocase; classtype:attempted-recon; sid:200024058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.rhwdsq.top",nocase; classtype:attempted-recon; sid:200024059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.rjfbqi.top",nocase; classtype:attempted-recon; sid:200024060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.rkafro.top",nocase; classtype:attempted-recon; sid:200024061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.aiinpw.za.com",nocase; classtype:attempted-recon; sid:200024062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.apoljj.za.com",nocase; classtype:attempted-recon; sid:200024063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.axbhie.za.com",nocase; classtype:attempted-recon; sid:200024064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.cbargn.za.com",nocase; classtype:attempted-recon; sid:200024065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.cndiyk.za.com",nocase; classtype:attempted-recon; sid:200024066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.cnzlue.za.com",nocase; classtype:attempted-recon; sid:200024067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.cpclxs.za.com",nocase; classtype:attempted-recon; sid:200024068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.difkhu.za.com",nocase; classtype:attempted-recon; sid:200024069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.dnjggs.za.com",nocase; classtype:attempted-recon; sid:200024070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.dyjnbb.za.com",nocase; classtype:attempted-recon; sid:200024071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.dzniib.za.com",nocase; classtype:attempted-recon; sid:200024072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.epmgtc.za.com",nocase; classtype:attempted-recon; sid:200024073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.fflglh.za.com",nocase; classtype:attempted-recon; sid:200024074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.fjdayb.za.com",nocase; classtype:attempted-recon; sid:200024075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.flydpf.za.com",nocase; classtype:attempted-recon; sid:200024076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.fmmfcz.za.com",nocase; classtype:attempted-recon; sid:200024077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.frghvs.za.com",nocase; classtype:attempted-recon; sid:200024078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.fthjtm.za.com",nocase; classtype:attempted-recon; sid:200024079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.fyyfxo.za.com",nocase; classtype:attempted-recon; sid:200024080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.gbwdln.za.com",nocase; classtype:attempted-recon; sid:200024081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.gbxbjo.za.com",nocase; classtype:attempted-recon; sid:200024082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.hcnqqk.za.com",nocase; classtype:attempted-recon; sid:200024083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.iezkxp.za.com",nocase; classtype:attempted-recon; sid:200024084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.ifpdph.za.com",nocase; classtype:attempted-recon; sid:200024085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.jdjghn.za.com",nocase; classtype:attempted-recon; sid:200024086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.jpxnnz.za.com",nocase; classtype:attempted-recon; sid:200024087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.jygknw.za.com",nocase; classtype:attempted-recon; sid:200024088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.jzemci.za.com",nocase; classtype:attempted-recon; sid:200024089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.kzdaec.za.com",nocase; classtype:attempted-recon; sid:200024090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.lcuqbc.za.com",nocase; classtype:attempted-recon; sid:200024091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.lklgbt.za.com",nocase; classtype:attempted-recon; sid:200024092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.lqonrt.za.com",nocase; classtype:attempted-recon; sid:200024093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.lvuojw.za.com",nocase; classtype:attempted-recon; sid:200024094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.lymdeg.za.com",nocase; classtype:attempted-recon; sid:200024095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.mgfxpv.za.com",nocase; classtype:attempted-recon; sid:200024096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.nkgnxu.za.com",nocase; classtype:attempted-recon; sid:200024097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.nlutye.za.com",nocase; classtype:attempted-recon; sid:200024098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.nqawww.za.com",nocase; classtype:attempted-recon; sid:200024099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.nskxef.za.com",nocase; classtype:attempted-recon; sid:200024100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.nsrsyf.za.com",nocase; classtype:attempted-recon; sid:200024101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.ntmdlo.za.com",nocase; classtype:attempted-recon; sid:200024102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.nyapck.za.com",nocase; classtype:attempted-recon; sid:200024103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.oaimcs.za.com",nocase; classtype:attempted-recon; sid:200024104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.obnjjr.za.com",nocase; classtype:attempted-recon; sid:200024105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.ojabvb.za.com",nocase; classtype:attempted-recon; sid:200024106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.pddjuu.za.com",nocase; classtype:attempted-recon; sid:200024107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.peqrlu.za.com",nocase; classtype:attempted-recon; sid:200024108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.pfkndl.za.com",nocase; classtype:attempted-recon; sid:200024109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.pfxtar.za.com",nocase; classtype:attempted-recon; sid:200024110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.phskmc.za.com",nocase; classtype:attempted-recon; sid:200024111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.pilzbq.za.com",nocase; classtype:attempted-recon; sid:200024112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.prfshi.za.com",nocase; classtype:attempted-recon; sid:200024113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.pruuwp.za.com",nocase; classtype:attempted-recon; sid:200024114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.pxwxmw.za.com",nocase; classtype:attempted-recon; sid:200024115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.qbkymz.za.com",nocase; classtype:attempted-recon; sid:200024116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.qigckf.za.com",nocase; classtype:attempted-recon; sid:200024117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.qsgdnx.za.com",nocase; classtype:attempted-recon; sid:200024118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.qyoqyz.za.com",nocase; classtype:attempted-recon; sid:200024119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.qytbke.za.com",nocase; classtype:attempted-recon; sid:200024120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.rouqjs.za.com",nocase; classtype:attempted-recon; sid:200024121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.rsxmth.za.com",nocase; classtype:attempted-recon; sid:200024122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.ryogde.za.com",nocase; classtype:attempted-recon; sid:200024123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.sbonjn.za.com",nocase; classtype:attempted-recon; sid:200024124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.sewril.za.com",nocase; classtype:attempted-recon; sid:200024125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.stghfe.za.com",nocase; classtype:attempted-recon; sid:200024126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.sznube.za.com",nocase; classtype:attempted-recon; sid:200024127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.taqabm.za.com",nocase; classtype:attempted-recon; sid:200024128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.tfdebx.za.com",nocase; classtype:attempted-recon; sid:200024129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.trzfav.za.com",nocase; classtype:attempted-recon; sid:200024130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.uhdxmb.za.com",nocase; classtype:attempted-recon; sid:200024131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.uktqmo.za.com",nocase; classtype:attempted-recon; sid:200024132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.vhwplz.za.com",nocase; classtype:attempted-recon; sid:200024133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.vixxvg.za.com",nocase; classtype:attempted-recon; sid:200024134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.vjyswj.za.com",nocase; classtype:attempted-recon; sid:200024135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.vmmoue.za.com",nocase; classtype:attempted-recon; sid:200024136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.vnsscq.za.com",nocase; classtype:attempted-recon; sid:200024137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.vtihba.za.com",nocase; classtype:attempted-recon; sid:200024138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.vucabx.za.com",nocase; classtype:attempted-recon; sid:200024139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.vunivt.za.com",nocase; classtype:attempted-recon; sid:200024140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.vusnur.za.com",nocase; classtype:attempted-recon; sid:200024141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.wffxjj.za.com",nocase; classtype:attempted-recon; sid:200024142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.wssjge.za.com",nocase; classtype:attempted-recon; sid:200024143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.wylftw.za.com",nocase; classtype:attempted-recon; sid:200024144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.xioxfp.za.com",nocase; classtype:attempted-recon; sid:200024145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.xmigxe.za.com",nocase; classtype:attempted-recon; sid:200024146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.yjnkya.za.com",nocase; classtype:attempted-recon; sid:200024147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.ylvgii.za.com",nocase; classtype:attempted-recon; sid:200024148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.ymixml.za.com",nocase; classtype:attempted-recon; sid:200024149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.yoltyz.za.com",nocase; classtype:attempted-recon; sid:200024150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.yyciai.za.com",nocase; classtype:attempted-recon; sid:200024151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.zenagx.za.com",nocase; classtype:attempted-recon; sid:200024152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.zhafla.za.com",nocase; classtype:attempted-recon; sid:200024153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.ziqmtw.za.com",nocase; classtype:attempted-recon; sid:200024154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.ziuzyk.za.com",nocase; classtype:attempted-recon; sid:200024155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.zktobi.za.com",nocase; classtype:attempted-recon; sid:200024156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.zlppsf.za.com",nocase; classtype:attempted-recon; sid:200024157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.zrmusc.za.com",nocase; classtype:attempted-recon; sid:200024158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevseci.vicvrseeaveesi.zudxug.za.com",nocase; classtype:attempted-recon; sid:200024159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.aiinpw.za.com",nocase; classtype:attempted-recon; sid:200024160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.apoljj.za.com",nocase; classtype:attempted-recon; sid:200024161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.axbhie.za.com",nocase; classtype:attempted-recon; sid:200024162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.cbargn.za.com",nocase; classtype:attempted-recon; sid:200024163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.cndiyk.za.com",nocase; classtype:attempted-recon; sid:200024164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.cnzlue.za.com",nocase; classtype:attempted-recon; sid:200024165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.cpclxs.za.com",nocase; classtype:attempted-recon; sid:200024166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.difkhu.za.com",nocase; classtype:attempted-recon; sid:200024167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.dyjnbb.za.com",nocase; classtype:attempted-recon; sid:200024168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.dzniib.za.com",nocase; classtype:attempted-recon; sid:200024169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.epmgtc.za.com",nocase; classtype:attempted-recon; sid:200024170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.fflglh.za.com",nocase; classtype:attempted-recon; sid:200024171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.fjdayb.za.com",nocase; classtype:attempted-recon; sid:200024172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.flydpf.za.com",nocase; classtype:attempted-recon; sid:200024173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.fmdodt.za.com",nocase; classtype:attempted-recon; sid:200024174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.fmmfcz.za.com",nocase; classtype:attempted-recon; sid:200024175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.frghvs.za.com",nocase; classtype:attempted-recon; sid:200024176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.fthjtm.za.com",nocase; classtype:attempted-recon; sid:200024177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.fyyfxo.za.com",nocase; classtype:attempted-recon; sid:200024178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.gbwdln.za.com",nocase; classtype:attempted-recon; sid:200024179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.gbxbjo.za.com",nocase; classtype:attempted-recon; sid:200024180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.hcnqqk.za.com",nocase; classtype:attempted-recon; sid:200024181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.iezkxp.za.com",nocase; classtype:attempted-recon; sid:200024182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.ifpdph.za.com",nocase; classtype:attempted-recon; sid:200024183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.jdjghn.za.com",nocase; classtype:attempted-recon; sid:200024184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.jpxnnz.za.com",nocase; classtype:attempted-recon; sid:200024185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.jygknw.za.com",nocase; classtype:attempted-recon; sid:200024186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.jzemci.za.com",nocase; classtype:attempted-recon; sid:200024187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.kzdaec.za.com",nocase; classtype:attempted-recon; sid:200024188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.lcuqbc.za.com",nocase; classtype:attempted-recon; sid:200024189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.lklgbt.za.com",nocase; classtype:attempted-recon; sid:200024190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.lqonrt.za.com",nocase; classtype:attempted-recon; sid:200024191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.lvuojw.za.com",nocase; classtype:attempted-recon; sid:200024192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.lymdeg.za.com",nocase; classtype:attempted-recon; sid:200024193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.mgfxpv.za.com",nocase; classtype:attempted-recon; sid:200024194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.nkgnxu.za.com",nocase; classtype:attempted-recon; sid:200024195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.nlutye.za.com",nocase; classtype:attempted-recon; sid:200024196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.nqawww.za.com",nocase; classtype:attempted-recon; sid:200024197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.nskxef.za.com",nocase; classtype:attempted-recon; sid:200024198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.nsrsyf.za.com",nocase; classtype:attempted-recon; sid:200024199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.ntmdlo.za.com",nocase; classtype:attempted-recon; sid:200024200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.nyapck.za.com",nocase; classtype:attempted-recon; sid:200024201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.oaimcs.za.com",nocase; classtype:attempted-recon; sid:200024202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.obnjjr.za.com",nocase; classtype:attempted-recon; sid:200024203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.ojabvb.za.com",nocase; classtype:attempted-recon; sid:200024204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.pddjuu.za.com",nocase; classtype:attempted-recon; sid:200024205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.peqrlu.za.com",nocase; classtype:attempted-recon; sid:200024206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.pfkndl.za.com",nocase; classtype:attempted-recon; sid:200024207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.pfxtar.za.com",nocase; classtype:attempted-recon; sid:200024208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.phskmc.za.com",nocase; classtype:attempted-recon; sid:200024209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.pilzbq.za.com",nocase; classtype:attempted-recon; sid:200024210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.prfshi.za.com",nocase; classtype:attempted-recon; sid:200024211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.pruuwp.za.com",nocase; classtype:attempted-recon; sid:200024212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.pxwxmw.za.com",nocase; classtype:attempted-recon; sid:200024213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.qbkymz.za.com",nocase; classtype:attempted-recon; sid:200024214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.qigckf.za.com",nocase; classtype:attempted-recon; sid:200024215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.qsgdnx.za.com",nocase; classtype:attempted-recon; sid:200024216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.qyoqyz.za.com",nocase; classtype:attempted-recon; sid:200024217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.qytbke.za.com",nocase; classtype:attempted-recon; sid:200024218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.rouqjs.za.com",nocase; classtype:attempted-recon; sid:200024219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.rsxmth.za.com",nocase; classtype:attempted-recon; sid:200024220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.ryogde.za.com",nocase; classtype:attempted-recon; sid:200024221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.sbonjn.za.com",nocase; classtype:attempted-recon; sid:200024222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.sewril.za.com",nocase; classtype:attempted-recon; sid:200024223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.stghfe.za.com",nocase; classtype:attempted-recon; sid:200024224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.sznube.za.com",nocase; classtype:attempted-recon; sid:200024225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.taqabm.za.com",nocase; classtype:attempted-recon; sid:200024226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.tfdebx.za.com",nocase; classtype:attempted-recon; sid:200024227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.trzfav.za.com",nocase; classtype:attempted-recon; sid:200024228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.uhdxmb.za.com",nocase; classtype:attempted-recon; sid:200024229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.uktqmo.za.com",nocase; classtype:attempted-recon; sid:200024230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.vhwplz.za.com",nocase; classtype:attempted-recon; sid:200024231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.vixxvg.za.com",nocase; classtype:attempted-recon; sid:200024232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.vjyswj.za.com",nocase; classtype:attempted-recon; sid:200024233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.vmmoue.za.com",nocase; classtype:attempted-recon; sid:200024234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.vnsscq.za.com",nocase; classtype:attempted-recon; sid:200024235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.vtihba.za.com",nocase; classtype:attempted-recon; sid:200024236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.vucabx.za.com",nocase; classtype:attempted-recon; sid:200024237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.vunivt.za.com",nocase; classtype:attempted-recon; sid:200024238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.vusnur.za.com",nocase; classtype:attempted-recon; sid:200024239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.wffxjj.za.com",nocase; classtype:attempted-recon; sid:200024240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.wssjge.za.com",nocase; classtype:attempted-recon; sid:200024241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.wylftw.za.com",nocase; classtype:attempted-recon; sid:200024242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.xioxfp.za.com",nocase; classtype:attempted-recon; sid:200024243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.xmigxe.za.com",nocase; classtype:attempted-recon; sid:200024244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.ygrkwy.za.com",nocase; classtype:attempted-recon; sid:200024245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.yjnkya.za.com",nocase; classtype:attempted-recon; sid:200024246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.ylvgii.za.com",nocase; classtype:attempted-recon; sid:200024247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.ymixml.za.com",nocase; classtype:attempted-recon; sid:200024248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.yoltyz.za.com",nocase; classtype:attempted-recon; sid:200024249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.yyciai.za.com",nocase; classtype:attempted-recon; sid:200024250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.zenagx.za.com",nocase; classtype:attempted-recon; sid:200024251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.zhafla.za.com",nocase; classtype:attempted-recon; sid:200024252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.ziqmtw.za.com",nocase; classtype:attempted-recon; sid:200024253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.ziuzyk.za.com",nocase; classtype:attempted-recon; sid:200024254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.zktobi.za.com",nocase; classtype:attempted-recon; sid:200024255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.zlppsf.za.com",nocase; classtype:attempted-recon; sid:200024256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.zrmusc.za.com",nocase; classtype:attempted-recon; sid:200024257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscrevsei.vivcsreesvesi.zudxug.za.com",nocase; classtype:attempted-recon; sid:200024258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200024259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200024260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200024261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.balaet.icu",nocase; classtype:attempted-recon; sid:200024262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200024263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.bporry.top",nocase; classtype:attempted-recon; sid:200024264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.bspybm.top",nocase; classtype:attempted-recon; sid:200024265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200024266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200024267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200024268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200024269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200024270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.cntxao.top",nocase; classtype:attempted-recon; sid:200024271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.coflya.top",nocase; classtype:attempted-recon; sid:200024272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200024273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.craycraft.top",nocase; classtype:attempted-recon; sid:200024274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.cwadib.top",nocase; classtype:attempted-recon; sid:200024275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200024276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200024277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.dauexk.top",nocase; classtype:attempted-recon; sid:200024278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200024279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200024280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200024281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200024282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200024283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200024284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200024285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200024286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200024287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.elhicw.top",nocase; classtype:attempted-recon; sid:200024288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200024289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200024290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200024291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.exoysm.top",nocase; classtype:attempted-recon; sid:200024292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200024293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200024294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200024295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200024296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200024297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200024298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200024299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200024300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.iooazb.top",nocase; classtype:attempted-recon; sid:200024301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200024302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200024303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200024304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200024305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.kpblio.top",nocase; classtype:attempted-recon; sid:200024306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.lenorv.top",nocase; classtype:attempted-recon; sid:200024307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200024308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200024309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200024310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200024311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200024312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.pkilix.top",nocase; classtype:attempted-recon; sid:200024313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200024314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200024315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200024316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200024317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200024318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200024319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200024320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200024321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200024322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200024323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.shaot.icu",nocase; classtype:attempted-recon; sid:200024324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200024325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200024326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200024327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200024328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200024329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200024330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.ufihby.top",nocase; classtype:attempted-recon; sid:200024331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.upuphone.group",nocase; classtype:attempted-recon; sid:200024332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200024333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.urekwh.top",nocase; classtype:attempted-recon; sid:200024334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200024335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.vozep.icu",nocase; classtype:attempted-recon; sid:200024336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200024337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.wbziul.top",nocase; classtype:attempted-recon; sid:200024338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200024339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200024340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.wetot.icu",nocase; classtype:attempted-recon; sid:200024341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200024342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.wingfh.top",nocase; classtype:attempted-recon; sid:200024343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200024344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200024345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200024346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200024347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.xudixq.top",nocase; classtype:attempted-recon; sid:200024348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200024349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200024350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200024351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.yavkol.top",nocase; classtype:attempted-recon; sid:200024352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200024353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200024354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200024355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200024356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200024357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200024358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.zynepg.top",nocase; classtype:attempted-recon; sid:200024359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.02vk.top",nocase; classtype:attempted-recon; sid:200024360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200024361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.afevzf.top",nocase; classtype:attempted-recon; sid:200024362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200024363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200024364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200024365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.balaet.icu",nocase; classtype:attempted-recon; sid:200024366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200024367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200024368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200024369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.bporry.top",nocase; classtype:attempted-recon; sid:200024370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.bspybm.top",nocase; classtype:attempted-recon; sid:200024371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200024372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200024373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200024374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200024375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200024376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.cntxao.top",nocase; classtype:attempted-recon; sid:200024377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.coflya.top",nocase; classtype:attempted-recon; sid:200024378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200024379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.craycraft.top",nocase; classtype:attempted-recon; sid:200024380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.cwadib.top",nocase; classtype:attempted-recon; sid:200024381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200024382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200024383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200024384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200024385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200024386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200024387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.dsjrpk.top",nocase; classtype:attempted-recon; sid:200024388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200024389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200024390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200024391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200024392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.elhicw.top",nocase; classtype:attempted-recon; sid:200024393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200024394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200024395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200024396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.exoysm.top",nocase; classtype:attempted-recon; sid:200024397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200024398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200024399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200024400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200024401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200024402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200024403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200024404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200024405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.iooazb.top",nocase; classtype:attempted-recon; sid:200024406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200024407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200024408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200024409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200024410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.kpblio.top",nocase; classtype:attempted-recon; sid:200024411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.lenorv.top",nocase; classtype:attempted-recon; sid:200024412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200024413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200024414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200024415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.pkilix.top",nocase; classtype:attempted-recon; sid:200024416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200024417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200024418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200024419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200024420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.ronipp.top",nocase; classtype:attempted-recon; sid:200024421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200024422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200024423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200024424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200024425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200024426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200024427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200024428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200024429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200024430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200024431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.ufihby.top",nocase; classtype:attempted-recon; sid:200024432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.upuphone.group",nocase; classtype:attempted-recon; sid:200024433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200024434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.urekwh.top",nocase; classtype:attempted-recon; sid:200024435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200024436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.vozep.icu",nocase; classtype:attempted-recon; sid:200024437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200024438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.wbziul.top",nocase; classtype:attempted-recon; sid:200024439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200024440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200024441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.wetot.icu",nocase; classtype:attempted-recon; sid:200024442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.wetot.life",nocase; classtype:attempted-recon; sid:200024443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200024444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.wingfh.top",nocase; classtype:attempted-recon; sid:200024445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200024446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200024447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200024448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200024449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.xudixq.top",nocase; classtype:attempted-recon; sid:200024450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200024451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200024452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.yavkol.top",nocase; classtype:attempted-recon; sid:200024453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200024454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200024455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200024456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200024457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200024458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200024459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.znegsr.top",nocase; classtype:attempted-recon; sid:200024460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.zynepg.top",nocase; classtype:attempted-recon; sid:200024461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.02vk.top",nocase; classtype:attempted-recon; sid:200024462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.afevzf.top",nocase; classtype:attempted-recon; sid:200024463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.ayqtuj.top",nocase; classtype:attempted-recon; sid:200024464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200024465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.balaet.icu",nocase; classtype:attempted-recon; sid:200024466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200024467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200024468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200024469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.bporry.top",nocase; classtype:attempted-recon; sid:200024470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.bspybm.top",nocase; classtype:attempted-recon; sid:200024471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200024472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200024473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.cipqzd.top",nocase; classtype:attempted-recon; sid:200024474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200024475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200024476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.cntxao.top",nocase; classtype:attempted-recon; sid:200024477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.coflya.top",nocase; classtype:attempted-recon; sid:200024478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.cpgspk.top",nocase; classtype:attempted-recon; sid:200024479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.craycraft.top",nocase; classtype:attempted-recon; sid:200024480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200024481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200024482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.dauexk.top",nocase; classtype:attempted-recon; sid:200024483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200024484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200024485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200024486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200024487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200024488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.ehngpw.top",nocase; classtype:attempted-recon; sid:200024489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200024490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.elhicw.top",nocase; classtype:attempted-recon; sid:200024491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200024492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200024493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.exoysm.top",nocase; classtype:attempted-recon; sid:200024494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200024495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200024496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200024497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200024498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200024499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200024500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200024501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200024502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200024503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.jkoozw.top",nocase; classtype:attempted-recon; sid:200024504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200024505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.kpblio.top",nocase; classtype:attempted-recon; sid:200024506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.lenorv.top",nocase; classtype:attempted-recon; sid:200024507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200024508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.mkpiab.top",nocase; classtype:attempted-recon; sid:200024509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200024510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200024511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.pkilix.top",nocase; classtype:attempted-recon; sid:200024512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200024513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200024514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200024515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.rkobagr.icu",nocase; classtype:attempted-recon; sid:200024516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.ronipp.top",nocase; classtype:attempted-recon; sid:200024517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200024518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.runjin004.icu",nocase; classtype:attempted-recon; sid:200024519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200024520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200024521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200024522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200024523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.shaot.icu",nocase; classtype:attempted-recon; sid:200024524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200024525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.tomorrowstduio.top",nocase; classtype:attempted-recon; sid:200024526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200024527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200024528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200024529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.ufihby.top",nocase; classtype:attempted-recon; sid:200024530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.upuphone.group",nocase; classtype:attempted-recon; sid:200024531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200024532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.urekwh.top",nocase; classtype:attempted-recon; sid:200024533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200024534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.wbvazy.top",nocase; classtype:attempted-recon; sid:200024535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.wbziul.top",nocase; classtype:attempted-recon; sid:200024536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200024537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200024538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.wetot.icu",nocase; classtype:attempted-recon; sid:200024539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.wetot.life",nocase; classtype:attempted-recon; sid:200024540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200024541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200024542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200024543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200024544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200024545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200024546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.xudixq.top",nocase; classtype:attempted-recon; sid:200024547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200024548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200024549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200024550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.yavkol.top",nocase; classtype:attempted-recon; sid:200024551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200024552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200024553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200024554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200024555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200024556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200024557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200024558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.znegsr.top",nocase; classtype:attempted-recon; sid:200024559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.zynepg.top",nocase; classtype:attempted-recon; sid:200024560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.02vk.top",nocase; classtype:attempted-recon; sid:200024561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.abzcr.icu",nocase; classtype:attempted-recon; sid:200024562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.afevzf.top",nocase; classtype:attempted-recon; sid:200024563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.ajvrm.icu",nocase; classtype:attempted-recon; sid:200024564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.badkfs.icu",nocase; classtype:attempted-recon; sid:200024565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.balaet.icu",nocase; classtype:attempted-recon; sid:200024566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.bdbbvv.top",nocase; classtype:attempted-recon; sid:200024567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.benefitted.icu",nocase; classtype:attempted-recon; sid:200024568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.bjexfe.top",nocase; classtype:attempted-recon; sid:200024569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.bporry.top",nocase; classtype:attempted-recon; sid:200024570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.bspybm.top",nocase; classtype:attempted-recon; sid:200024571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.bzfdtw.top",nocase; classtype:attempted-recon; sid:200024572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.ccvjar.top",nocase; classtype:attempted-recon; sid:200024573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.cjysqjj.icu",nocase; classtype:attempted-recon; sid:200024574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.ckhnlk.top",nocase; classtype:attempted-recon; sid:200024575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.cntxao.top",nocase; classtype:attempted-recon; sid:200024576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.coflya.top",nocase; classtype:attempted-recon; sid:200024577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.craycraft.top",nocase; classtype:attempted-recon; sid:200024578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.cwadib.top",nocase; classtype:attempted-recon; sid:200024579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.cyqggi.top",nocase; classtype:attempted-recon; sid:200024580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.dafenghao.icu",nocase; classtype:attempted-recon; sid:200024581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.dhwynj.top",nocase; classtype:attempted-recon; sid:200024582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.digitize.ltd",nocase; classtype:attempted-recon; sid:200024583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.dlnxzo.top",nocase; classtype:attempted-recon; sid:200024584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.dpqshv.top",nocase; classtype:attempted-recon; sid:200024585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.dtyweh.top",nocase; classtype:attempted-recon; sid:200024586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.dyugxj.top",nocase; classtype:attempted-recon; sid:200024587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.ehxsyt.top",nocase; classtype:attempted-recon; sid:200024588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.elhicw.top",nocase; classtype:attempted-recon; sid:200024589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.enkzhe.top",nocase; classtype:attempted-recon; sid:200024590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.eucvbc.top",nocase; classtype:attempted-recon; sid:200024591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.evyqhg.top",nocase; classtype:attempted-recon; sid:200024592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.exoysm.top",nocase; classtype:attempted-recon; sid:200024593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.fgcew.icu",nocase; classtype:attempted-recon; sid:200024594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.fksiud.icu",nocase; classtype:attempted-recon; sid:200024595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.fvhuee.icu",nocase; classtype:attempted-recon; sid:200024596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.fvqetn.top",nocase; classtype:attempted-recon; sid:200024597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.hfoesk.top",nocase; classtype:attempted-recon; sid:200024598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.htixjser.icu",nocase; classtype:attempted-recon; sid:200024599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.huaxiano.icu",nocase; classtype:attempted-recon; sid:200024600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.hyfxgx.top",nocase; classtype:attempted-recon; sid:200024601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.iooazb.top",nocase; classtype:attempted-recon; sid:200024602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.jdftpe.top",nocase; classtype:attempted-recon; sid:200024603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.jdqomw.top",nocase; classtype:attempted-recon; sid:200024604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.jtuet.icu",nocase; classtype:attempted-recon; sid:200024605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.kpblio.top",nocase; classtype:attempted-recon; sid:200024606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.lenorv.top",nocase; classtype:attempted-recon; sid:200024607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.mavbpi.top",nocase; classtype:attempted-recon; sid:200024608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.mqiwux.top",nocase; classtype:attempted-recon; sid:200024609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.msiesya.icu",nocase; classtype:attempted-recon; sid:200024610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.nxxdqw.top",nocase; classtype:attempted-recon; sid:200024611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.pkilix.top",nocase; classtype:attempted-recon; sid:200024612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.pvhngq.top",nocase; classtype:attempted-recon; sid:200024613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.qskgtg.top",nocase; classtype:attempted-recon; sid:200024614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.quvhdd.top",nocase; classtype:attempted-recon; sid:200024615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.ronipp.top",nocase; classtype:attempted-recon; sid:200024616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.rsfcmb.icu",nocase; classtype:attempted-recon; sid:200024617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.sctgkq.top",nocase; classtype:attempted-recon; sid:200024618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.sdqqgx.top",nocase; classtype:attempted-recon; sid:200024619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.sejmqk.top",nocase; classtype:attempted-recon; sid:200024620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.sgrxpw.top",nocase; classtype:attempted-recon; sid:200024621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.shaot.icu",nocase; classtype:attempted-recon; sid:200024622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.ssrpsl.top",nocase; classtype:attempted-recon; sid:200024623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.tqmskg.top",nocase; classtype:attempted-recon; sid:200024624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.ttxupv.top",nocase; classtype:attempted-recon; sid:200024625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.tvdoqx.top",nocase; classtype:attempted-recon; sid:200024626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.ubdjag.top",nocase; classtype:attempted-recon; sid:200024627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.ufihby.top",nocase; classtype:attempted-recon; sid:200024628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.upuphone.group",nocase; classtype:attempted-recon; sid:200024629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.upuphone.ltd",nocase; classtype:attempted-recon; sid:200024630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.urekwh.top",nocase; classtype:attempted-recon; sid:200024631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.vfchrz.top",nocase; classtype:attempted-recon; sid:200024632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.vozep.icu",nocase; classtype:attempted-recon; sid:200024633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.wbziul.top",nocase; classtype:attempted-recon; sid:200024634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.wdtsjr.top",nocase; classtype:attempted-recon; sid:200024635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.wehqxs.top",nocase; classtype:attempted-recon; sid:200024636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.wgipfc.top",nocase; classtype:attempted-recon; sid:200024637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.wxnyfl.top",nocase; classtype:attempted-recon; sid:200024638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.wyisqr.top",nocase; classtype:attempted-recon; sid:200024639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.xaeuyf.top",nocase; classtype:attempted-recon; sid:200024640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.xlrppx.top",nocase; classtype:attempted-recon; sid:200024641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.xqpwkk.top",nocase; classtype:attempted-recon; sid:200024642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.xvtayq.top",nocase; classtype:attempted-recon; sid:200024643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.xxdjik.top",nocase; classtype:attempted-recon; sid:200024644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.yanwen.cc",nocase; classtype:attempted-recon; sid:200024645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.yavkol.top",nocase; classtype:attempted-recon; sid:200024646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.yhitbg.top",nocase; classtype:attempted-recon; sid:200024647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.ymwfnw.top",nocase; classtype:attempted-recon; sid:200024648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.yqzemo.top",nocase; classtype:attempted-recon; sid:200024649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.ytvuml.top",nocase; classtype:attempted-recon; sid:200024650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.zblgxm.top",nocase; classtype:attempted-recon; sid:200024651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.zjsyd.icu",nocase; classtype:attempted-recon; sid:200024652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.zliboyp.icu",nocase; classtype:attempted-recon; sid:200024653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.znegsr.top",nocase; classtype:attempted-recon; sid:200024654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.zynepg.top",nocase; classtype:attempted-recon; sid:200024655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecvei.vivsesve.gtfvze.top",nocase; classtype:attempted-recon; sid:200024656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsesa.vsicvsaasccsoi.pfbueg.top",nocase; classtype:attempted-recon; sid:200024657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsesa.vsicvsaasi.4678865.xyz",nocase; classtype:attempted-recon; sid:200024658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsesa.vsicvsai.sfts.top",nocase; classtype:attempted-recon; sid:200024659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsesa.vsicvsai.vnbxy.top",nocase; classtype:attempted-recon; sid:200024660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsesesaccsaase.vsicsevcceaoosearescoooseaasi.mfwrsg.top",nocase; classtype:attempted-recon; sid:200024661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsesesaccsaase.vsicsevcceaoosearescoooseaasi.rinlvb.top",nocase; classtype:attempted-recon; sid:200024662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsesesaccsaase.vsicsevscaaaosearescoooseccsoi.sswfzk.top",nocase; classtype:attempted-recon; sid:200024663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsesesaccsaase.vsicsevscaaiocearescooosecso.mfwrsg.top",nocase; classtype:attempted-recon; sid:200024664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsesesaccsaase.vsicsevscaaiocearescooosecso.sswfzk.top",nocase; classtype:attempted-recon; sid:200024665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecaiecsn.viscaieaeeivsei.adfnvc.top",nocase; classtype:attempted-recon; sid:200024666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecaiecsn.viscaieaeeivsei.claire.wiki",nocase; classtype:attempted-recon; sid:200024667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecaiecsn.viscaieaeeivsei.cxlzdq.top",nocase; classtype:attempted-recon; sid:200024668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecaiecsn.viscaieaeeivsei.rxrmyy.com.cn",nocase; classtype:attempted-recon; sid:200024669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecaiecsn.viscaieaeeivsei.sibkik.top",nocase; classtype:attempted-recon; sid:200024670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecaiecsn.viscaieaeeivsei.tfxrmyy.com.cn",nocase; classtype:attempted-recon; sid:200024671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecaiecsn.viscaieaeeivsei.yetbrg.top",nocase; classtype:attempted-recon; sid:200024672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecaiecsn.viscaieaeeivsei.zadeog.top",nocase; classtype:attempted-recon; sid:200024673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecaieosn.visceieaeeivsei.cmym.com.cn",nocase; classtype:attempted-recon; sid:200024674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecaieosn.visceieaeeivsei.cyrvcc.top",nocase; classtype:attempted-recon; sid:200024675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecaieosn.visceieaeeivsei.tcpduc.top",nocase; classtype:attempted-recon; sid:200024676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecaieosn.visceieaeeivsei.toamzo.top",nocase; classtype:attempted-recon; sid:200024677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecaieosn.visceieaeeivsei.xhmyfj.top",nocase; classtype:attempted-recon; sid:200024678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecaieosn.visceieaeeivsei.ywapap.top",nocase; classtype:attempted-recon; sid:200024679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecicesn.visacaeeeivsei.hbxzyy.com.cn",nocase; classtype:attempted-recon; sid:200024680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecicesn.visacaeeeivsei.jingang.ltd",nocase; classtype:attempted-recon; sid:200024681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecicesn.visacaeeeivsei.ueatey.top",nocase; classtype:attempted-recon; sid:200024682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecicesn.visacaeeeivsei.wrpwtl.top",nocase; classtype:attempted-recon; sid:200024683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecicesn.visacaeeeivsei.wwnkml.top",nocase; classtype:attempted-recon; sid:200024684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecicesn.visacaeeeivsei.xtxhpw.top",nocase; classtype:attempted-recon; sid:200024685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecicesn.visacaeeeivsei.zrvuez.top",nocase; classtype:attempted-recon; sid:200024686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecioesn.visecaeeeivsei.ckhsrv.top",nocase; classtype:attempted-recon; sid:200024687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecioesn.visecaeeeivsei.cyrvcc.top",nocase; classtype:attempted-recon; sid:200024688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecioesn.visecaeeeivsei.dufkio.top",nocase; classtype:attempted-recon; sid:200024689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecioesn.visecaeeeivsei.gaxrmyy.com.cn",nocase; classtype:attempted-recon; sid:200024690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecioesn.visecaeeeivsei.soofia.com.cn",nocase; classtype:attempted-recon; sid:200024691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecioesn.visecaeeeivsei.tcpduc.top",nocase; classtype:attempted-recon; sid:200024692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecioesn.visecaeeeivsei.vsxqtn.top",nocase; classtype:attempted-recon; sid:200024693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecioesn.visecaeeeivsei.yukyuz.top",nocase; classtype:attempted-recon; sid:200024694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieciosn.viseaeeivsei.drrazw.top",nocase; classtype:attempted-recon; sid:200024695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiacesn.visacaieeivsei.cmtj.com.cn",nocase; classtype:attempted-recon; sid:200024696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiacesn.visacaieeivsei.cyrvcc.top",nocase; classtype:attempted-recon; sid:200024697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiacesn.visacaieeivsei.jhts.com.cn",nocase; classtype:attempted-recon; sid:200024698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiacesn.visacaieeivsei.khxrmyy.com.cn",nocase; classtype:attempted-recon; sid:200024699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiacesn.visacaieeivsei.maqiao.net.cn",nocase; classtype:attempted-recon; sid:200024700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiacesn.visacaieeivsei.vqmbox.top",nocase; classtype:attempted-recon; sid:200024701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiacesn.visacaieeivsei.xpxrmyy.com.cn",nocase; classtype:attempted-recon; sid:200024702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiacesn.visacaieeivsei.xqrjjb.top",nocase; classtype:attempted-recon; sid:200024703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiacsn.visaaieivsei.ellejamilla.shop",nocase; classtype:attempted-recon; sid:200024704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiacsn.visaaieivsei.plxrmyy.com.cn",nocase; classtype:attempted-recon; sid:200024705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiaoesn.visecaieeivsei.fddmall.com.cn",nocase; classtype:attempted-recon; sid:200024706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiaoesn.visecaieeivsei.hbxzyy.com.cn",nocase; classtype:attempted-recon; sid:200024707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiaoesn.visecaieeivsei.ijingzhen.com.cn",nocase; classtype:attempted-recon; sid:200024708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiaoesn.visecaieeivsei.pgxrmyy.com.cn",nocase; classtype:attempted-recon; sid:200024709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiaoesn.visecaieeivsei.sidvzg.top",nocase; classtype:attempted-recon; sid:200024710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiaoesn.visecaieeivsei.sowrvw.top",nocase; classtype:attempted-recon; sid:200024711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieicsen.visaaceievsei.cmxzyy.com.cn",nocase; classtype:attempted-recon; sid:200024712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieicsen.visaaceievsei.drrazw.top",nocase; classtype:attempted-recon; sid:200024713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieicsen.visaaceievsei.gaxrmyy.com.cn",nocase; classtype:attempted-recon; sid:200024714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieicsen.visaaceievsei.qyxrmyy.com.cn",nocase; classtype:attempted-recon; sid:200024715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieicsen.visaaceievsei.xnmvhh.top",nocase; classtype:attempted-recon; sid:200024716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieicsen.visaaceievsei.ywapap.top",nocase; classtype:attempted-recon; sid:200024717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiosen.viseaceievsei.atnwoy.top",nocase; classtype:attempted-recon; sid:200024718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiosen.viseaceievsei.cmtj.com.cn",nocase; classtype:attempted-recon; sid:200024719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiosen.viseaceievsei.ijingzhen.com.cn",nocase; classtype:attempted-recon; sid:200024720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiosen.viseaceievsei.qwxrmyy.com.cn",nocase; classtype:attempted-recon; sid:200024721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieiosen.viseaceievsei.zrvuez.top",nocase; classtype:attempted-recon; sid:200024722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsvecaiescsn.vicsieasecvsvei.dsxrmyy.com.cn",nocase; classtype:attempted-recon; sid:200024723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsvecaiescsn.vicsieasecvsvei.gaxrmyy.com.cn",nocase; classtype:attempted-recon; sid:200024724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsvecaiescsn.vicsieasecvsvei.huatong.ltd",nocase; classtype:attempted-recon; sid:200024725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsvecaiescsn.vicsieasecvsvei.maqiao.net.cn",nocase; classtype:attempted-recon; sid:200024726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsvecaiescsn.vicsieasecvsvei.toamzo.top",nocase; classtype:attempted-recon; sid:200024727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsvecaiscsn.visiasecvsvei.ellejamilla.shop",nocase; classtype:attempted-recon; sid:200024728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsvecaiscsn.visiasecvsvei.hqhqhq03.shop",nocase; classtype:attempted-recon; sid:200024729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveciscsn.visasecvsvei.chongsiling.com.cn",nocase; classtype:attempted-recon; sid:200024730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveciscsn.visasecvsvei.tcpduc.top",nocase; classtype:attempted-recon; sid:200024731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsvecisecsn.viscaseecvsvei.adfnvc.top",nocase; classtype:attempted-recon; sid:200024732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsvecisecsn.viscaseecvsvei.chwtye.top",nocase; classtype:attempted-recon; sid:200024733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsvecisecsn.viscaseecvsvei.fddmall.com.cn",nocase; classtype:attempted-recon; sid:200024734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsvecisecsn.viscaseecvsvei.wmbvdd.top",nocase; classtype:attempted-recon; sid:200024735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsvecisecsn.viscaseecvsvei.xmzvjn.top",nocase; classtype:attempted-recon; sid:200024736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsvecisecsn.viscaseecvsvei.yisxcq.top",nocase; classtype:attempted-recon; sid:200024737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveiascsn.visaiscvsvei.sngyld.top",nocase; classtype:attempted-recon; sid:200024738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveiasecsn.viscaiescvsvei.adfnvc.top",nocase; classtype:attempted-recon; sid:200024739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveiasecsn.viscaiescvsvei.ctxd.com.cn",nocase; classtype:attempted-recon; sid:200024740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveiasecsn.viscaiescvsvei.cxvuvs.top",nocase; classtype:attempted-recon; sid:200024741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveiasecsn.viscaiescvsvei.drrazw.top",nocase; classtype:attempted-recon; sid:200024742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveiasecsn.viscaiescvsvei.yetbrg.top",nocase; classtype:attempted-recon; sid:200024743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveiscesn.visacscevsvei.atnwoy.top",nocase; classtype:attempted-recon; sid:200024744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveiscesn.visacscevsvei.dsnrvn.top",nocase; classtype:attempted-recon; sid:200024745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveiscesn.visacscevsvei.iudd.com.cn",nocase; classtype:attempted-recon; sid:200024746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveiscesn.visacscevsvei.lzxrmyy.com.cn",nocase; classtype:attempted-recon; sid:200024747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveiscesn.visacscevsvei.toamzo.top",nocase; classtype:attempted-recon; sid:200024748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveiscesn.visacscevsvei.vlodet.top",nocase; classtype:attempted-recon; sid:200024749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveiscesn.visacscevsvei.wrpwtl.top",nocase; classtype:attempted-recon; sid:200024750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveiscesn.visacscevsvei.yetbrg.top",nocase; classtype:attempted-recon; sid:200024751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vjlnwmbowc.duckdns.org",nocase; classtype:attempted-recon; sid:200024752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vjnted-marke.4326759.xyz",nocase; classtype:attempted-recon; sid:200024753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vjntetd-polska7dellvrwt.delldoctawplnds3.pl",nocase; classtype:attempted-recon; sid:200024754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk-mobile.ru",nocase; classtype:attempted-recon; sid:200024755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vkgolosabc.tk",nocase; classtype:attempted-recon; sid:200024756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vkgolosafu.tk",nocase; classtype:attempted-recon; sid:200024757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vkgolosahx.tk",nocase; classtype:attempted-recon; sid:200024758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vkgolosbcr.tk",nocase; classtype:attempted-recon; sid:200024759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vkgolosdpd.tk",nocase; classtype:attempted-recon; sid:200024760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vkgolosirq.tk",nocase; classtype:attempted-recon; sid:200024761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vkgoloskaa.tk",nocase; classtype:attempted-recon; sid:200024762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vkgolosktc.tk",nocase; classtype:attempted-recon; sid:200024763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vkgoloskwa.tk",nocase; classtype:attempted-recon; sid:200024764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vkgoloslnd.tk",nocase; classtype:attempted-recon; sid:200024765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vkgolosmgo.tk",nocase; classtype:attempted-recon; sid:200024766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vkgolosmqw.tk",nocase; classtype:attempted-recon; sid:200024767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vkmatka.in",nocase; classtype:attempted-recon; sid:200024768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vknuhgl.cf",nocase; classtype:attempted-recon; sid:200024769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vknuhgl.ga",nocase; classtype:attempted-recon; sid:200024770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vlgepnxwxa.duckdns.org",nocase; classtype:attempted-recon; sid:200024771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vljiwhtbqm.duckdns.org",nocase; classtype:attempted-recon; sid:200024772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vlvmqtkofj.duckdns.org",nocase; classtype:attempted-recon; sid:200024773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vm-system0021.message2.workers.dev",nocase; classtype:attempted-recon; sid:200024774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vm26012022.s3.fr-par.scw.cloud",nocase; classtype:attempted-recon; sid:200024775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vmboxx.xyz",nocase; classtype:attempted-recon; sid:200024776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vmyjivhtgh.duckdns.org",nocase; classtype:attempted-recon; sid:200024777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vnchwoe-3ri98gfv03e-r45fh-hvhejorug-erhg.obs.ap-southeast-3.myhuaweicloud.com",nocase; classtype:attempted-recon; sid:200024778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vnheoprti9g8bv-0ehrtg-0vhbe-0rghv-0ehggrt5.obs.la-south-2.myhuaweicloud.com",nocase; classtype:attempted-recon; sid:200024779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vogxbhevze.duckdns.org",nocase; classtype:attempted-recon; sid:200024780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"voicemai.myportfolio.com",nocase; classtype:attempted-recon; sid:200024781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"voicemail-refbe4d.sharedfiles-auth.workers.dev",nocase; classtype:attempted-recon; sid:200024782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"voltsneeww02.com",nocase; classtype:attempted-recon; sid:200024783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"volvocarskc.us1.list-manage.com",nocase; classtype:attempted-recon; sid:200024784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vopro.podia.com",nocase; classtype:attempted-recon; sid:200024785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vouchere-astrazeneca.totemsoftware.ro",nocase; classtype:attempted-recon; sid:200024786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vqfzjogfvj.duckdns.org",nocase; classtype:attempted-recon; sid:200024787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vrgth.tsxrmyy.cn",nocase; classtype:attempted-recon; sid:200024788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vroptaq.top",nocase; classtype:attempted-recon; sid:200024789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsdb.37985.cn",nocase; classtype:attempted-recon; sid:200024790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsdgd.ncaxxwu.cn",nocase; classtype:attempted-recon; sid:200024791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsrrdiuhuu.duckdns.org",nocase; classtype:attempted-recon; sid:200024792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vstnybwdji.duckdns.org",nocase; classtype:attempted-recon; sid:200024793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vtrq51.hyperphp.com",nocase; classtype:attempted-recon; sid:200024794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vtxmail2018.myfreesites.net",nocase; classtype:attempted-recon; sid:200024795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vukitbelsa.co.vu",nocase; classtype:attempted-recon; sid:200024796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vvanm.com",nocase; classtype:attempted-recon; sid:200024797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vvillainousmonstroustree.bancolombia4.repl.co",nocase; classtype:attempted-recon; sid:200024798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vvip-wa-group-ikyy-tikttok.riks12.my.id",nocase; classtype:attempted-recon; sid:200024799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vvntechnologies.com",nocase; classtype:attempted-recon; sid:200024800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vwbooahkem.duckdns.org",nocase; classtype:attempted-recon; sid:200024801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vww.extracashinterbankperu.com",nocase; classtype:attempted-recon; sid:200024802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vww.interbankbenefit-pe.com",nocase; classtype:attempted-recon; sid:200024803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vxbhjnwali.duckdns.org",nocase; classtype:attempted-recon; sid:200024804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vxbv.75293.cn",nocase; classtype:attempted-recon; sid:200024805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vxdse.myfreesites.net",nocase; classtype:attempted-recon; sid:200024806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vxffghawqr.duckdns.org",nocase; classtype:attempted-recon; sid:200024807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vxjzsyttsx.duckdns.org",nocase; classtype:attempted-recon; sid:200024808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vystar.toorassociate.com",nocase; classtype:attempted-recon; sid:200024809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"w782409br247e.blogspot.com",nocase; classtype:attempted-recon; sid:200024810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"w92.myportfolio.com",nocase; classtype:attempted-recon; sid:200024811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"w9eventos.com",nocase; classtype:attempted-recon; sid:200024812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wa.mfs.gg",nocase; classtype:attempted-recon; sid:200024813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wahed-koudsi2001.github.io",nocase; classtype:attempted-recon; sid:200024814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walken.uk",nocase; classtype:attempted-recon; sid:200024815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walldesign.com.tr",nocase; classtype:attempted-recon; sid:200024816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet-appshiiba.com",nocase; classtype:attempted-recon; sid:200024817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet-bridge.app",nocase; classtype:attempted-recon; sid:200024818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet-connect012.web.app",nocase; classtype:attempted-recon; sid:200024819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet-dapp.net",nocase; classtype:attempted-recon; sid:200024820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet-polygon.login-en.com",nocase; classtype:attempted-recon; sid:200024821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet-validator.tech",nocase; classtype:attempted-recon; sid:200024822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet.appsshiiiba.com",nocase; classtype:attempted-recon; sid:200024823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet.neeaar.com",nocase; classtype:attempted-recon; sid:200024824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet.polygon-technology.me",nocase; classtype:attempted-recon; sid:200024825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet.roninchain.cf",nocase; classtype:attempted-recon; sid:200024826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet.silesiacoin.com",nocase; classtype:attempted-recon; sid:200024827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletconnectall.net",nocase; classtype:attempted-recon; sid:200024828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletconnectsub.company",nocase; classtype:attempted-recon; sid:200024829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletreconcile.com",nocase; classtype:attempted-recon; sid:200024830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallets-connect.co",nocase; classtype:attempted-recon; sid:200024831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallets-support.com",nocase; classtype:attempted-recon; sid:200024832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallets-update.rf.gd",nocase; classtype:attempted-recon; sid:200024833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletscsupp0rtcentar.website2.me",nocase; classtype:attempted-recon; sid:200024834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletsdefi.com",nocase; classtype:attempted-recon; sid:200024835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletsencrypts.com",nocase; classtype:attempted-recon; sid:200024836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletvalidators.com",nocase; classtype:attempted-recon; sid:200024837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletverify.ml",nocase; classtype:attempted-recon; sid:200024838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wana78420.myfreesites.net",nocase; classtype:attempted-recon; sid:200024839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wandering-fire-1c00.jamaljewellerry356.workers.dev",nocase; classtype:attempted-recon; sid:200024840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wapsushisonlinewbe.com",nocase; classtype:attempted-recon; sid:200024841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"waqassupplies.com",nocase; classtype:attempted-recon; sid:200024842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"warmheartedmuddyclimate.galiiciar001.repl.co",nocase; classtype:attempted-recon; sid:200024843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"warnertelecomm.com",nocase; classtype:attempted-recon; sid:200024844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"warning-selectioneventhype.gq",nocase; classtype:attempted-recon; sid:200024845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"watchess.com.pk",nocase; classtype:attempted-recon; sid:200024846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"waves-enterprise.com",nocase; classtype:attempted-recon; sid:200024847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wayuai.com",nocase; classtype:attempted-recon; sid:200024848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wb-comerica.firebaseapp.com",nocase; classtype:attempted-recon; sid:200024849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wb-comerica.web.app",nocase; classtype:attempted-recon; sid:200024850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wbdzqdvclq.duckdns.org",nocase; classtype:attempted-recon; sid:200024851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wcisupply-1nvoice-storage.firebaseapp.com",nocase; classtype:attempted-recon; sid:200024852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wcisupply-1nvoice-storage.web.app",nocase; classtype:attempted-recon; sid:200024853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wcmjfofxdo.duckdns.org",nocase; classtype:attempted-recon; sid:200024854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wdgjqwnszj.duckdns.org",nocase; classtype:attempted-recon; sid:200024855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wdofcxixaw.duckdns.org",nocase; classtype:attempted-recon; sid:200024856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weathered-brook-6f8c.stubhub.workers.dev",nocase; classtype:attempted-recon; sid:200024857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weathered-king-77ec.noxexexe.workers.dev",nocase; classtype:attempted-recon; sid:200024858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weathered.mnevicionzone.workers.dev",nocase; classtype:attempted-recon; sid:200024859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-atencionalciiente.broubioqueados.repl.co",nocase; classtype:attempted-recon; sid:200024860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-disneyplus-at.com",nocase; classtype:attempted-recon; sid:200024861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-exoduss.com",nocase; classtype:attempted-recon; sid:200024862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-mtb.dvrlists.com",nocase; classtype:attempted-recon; sid:200024863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-sand-home.blogspot.com",nocase; classtype:attempted-recon; sid:200024864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-soc.firebaseapp.com",nocase; classtype:attempted-recon; sid:200024865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-soc.web.app",nocase; classtype:attempted-recon; sid:200024866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.activationaccess.com",nocase; classtype:attempted-recon; sid:200024867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.bredbanque.trans.sylog.co",nocase; classtype:attempted-recon; sid:200024868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.logodesign.net",nocase; classtype:attempted-recon; sid:200024869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.prodepo.com.tr",nocase; classtype:attempted-recon; sid:200024870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web1.your1shopwithxz.com",nocase; classtype:attempted-recon; sid:200024871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web2fa-auth.dvrlists.com",nocase; classtype:attempted-recon; sid:200024872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web3coi.web.app",nocase; classtype:attempted-recon; sid:200024873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web3nodeapp.net",nocase; classtype:attempted-recon; sid:200024874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web69.s249.goserver.host",nocase; classtype:attempted-recon; sid:200024875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web8389.web07.bero-webspace.de",nocase; classtype:attempted-recon; sid:200024876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webairbnb.com",nocase; classtype:attempted-recon; sid:200024877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webanalytics.harsha-abakus.com",nocase; classtype:attempted-recon; sid:200024878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webclient.moreapp.com",nocase; classtype:attempted-recon; sid:200024879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webconnectappsync.com",nocase; classtype:attempted-recon; sid:200024880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webdatamltrainingdiag842.blob.core.windows.net",nocase; classtype:attempted-recon; sid:200024881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webedumaiedu.weebly.com",nocase; classtype:attempted-recon; sid:200024882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webemail-yiwed-514d.langchine.workers.dev",nocase; classtype:attempted-recon; sid:200024883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webextensions.info",nocase; classtype:attempted-recon; sid:200024884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webklah-s-school.thinkific.com",nocase; classtype:attempted-recon; sid:200024885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-cisco.firebaseapp.com",nocase; classtype:attempted-recon; sid:200024886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-cisco.web.app",nocase; classtype:attempted-recon; sid:200024887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-laposte19.yolasite.com",nocase; classtype:attempted-recon; sid:200024888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-laposte27.yolasite.com",nocase; classtype:attempted-recon; sid:200024889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-ovh-moncompte-messagerie.waterpuresystems.com",nocase; classtype:attempted-recon; sid:200024890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-roundcubeblack.firebaseapp.com",nocase; classtype:attempted-recon; sid:200024891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-roundcubeblack.web.app",nocase; classtype:attempted-recon; sid:200024892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-sso8uyg.web.app",nocase; classtype:attempted-recon; sid:200024893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail.bellahills.com",nocase; classtype:attempted-recon; sid:200024894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail.salemgroups.com",nocase; classtype:attempted-recon; sid:200024895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail6.networksolutionsemail.com",nocase; classtype:attempted-recon; sid:200024896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail81pne.mailsrrsso908.workers.dev",nocase; classtype:attempted-recon; sid:200024897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmailadmin0.myfreesites.net",nocase; classtype:attempted-recon; sid:200024898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmailoutl.zyrosite.com",nocase; classtype:attempted-recon; sid:200024899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmailpt.yolasite.com",nocase; classtype:attempted-recon; sid:200024900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webs-sumup.de.cool",nocase; classtype:attempted-recon; sid:200024901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webseguridadportalbancadavivienda.com",nocase; classtype:attempted-recon; sid:200024902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webservice-mailupdatemail.arqanexportcompany1664.workers.dev",nocase; classtype:attempted-recon; sid:200024903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webstories.eu",nocase; classtype:attempted-recon; sid:200024904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webvalidator-interface.net",nocase; classtype:attempted-recon; sid:200024905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webwalletapp.co",nocase; classtype:attempted-recon; sid:200024906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weedeepskyblueconfig.galiciabank1.repl.co",nocase; classtype:attempted-recon; sid:200024907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weedx.znnebh.cn",nocase; classtype:attempted-recon; sid:200024908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weeexpertcamel.949348casobrou.repl.co",nocase; classtype:attempted-recon; sid:200024909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"welcome-eventsup.ml",nocase; classtype:attempted-recon; sid:200024910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"welcome-test-moderator.tk",nocase; classtype:attempted-recon; sid:200024911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"well-account.introductionally.webhostingforstudents.com",nocase; classtype:attempted-recon; sid:200024912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wellhealthhtc.com",nocase; classtype:attempted-recon; sid:200024913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wellinformedanxiousprocesses.seguritydesblo.repl.co",nocase; classtype:attempted-recon; sid:200024914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weplays-connect.tv",nocase; classtype:attempted-recon; sid:200024915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"westernaonline.rs",nocase; classtype:attempted-recon; sid:200024916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"westrock-corp.dongfangfuli.com",nocase; classtype:attempted-recon; sid:200024917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"westrockozarksjobs.com",nocase; classtype:attempted-recon; sid:200024918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"westwoodfox.com",nocase; classtype:attempted-recon; sid:200024919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wetransfe-f5044.firebaseapp.com",nocase; classtype:attempted-recon; sid:200024920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wetransfe-f5044.web.app",nocase; classtype:attempted-recon; sid:200024921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wgfdbs.cc",nocase; classtype:attempted-recon; sid:200024922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wgrmh.ga",nocase; classtype:attempted-recon; sid:200024923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whare.100webspace.net",nocase; classtype:attempted-recon; sid:200024924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wheelsofmercy.org",nocase; classtype:attempted-recon; sid:200024925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whimsical-profiterole-bcaf0a.netlify.app",nocase; classtype:attempted-recon; sid:200024926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"white-block-2e16.desatt.workers.dev",nocase; classtype:attempted-recon; sid:200024927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"white-bush-4bbc.goldenwolf542.workers.dev",nocase; classtype:attempted-recon; sid:200024928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"white-field-05e4.kdg6smak.workers.dev",nocase; classtype:attempted-recon; sid:200024929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"white-glitter-ba48.casterweed.workers.dev",nocase; classtype:attempted-recon; sid:200024930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whitestar-legend.com",nocase; classtype:attempted-recon; sid:200024931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whitetzfx.com",nocase; classtype:attempted-recon; sid:200024932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whjlnympmn.duckdns.org",nocase; classtype:attempted-recon; sid:200024933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whmbplkeey.duckdns.org",nocase; classtype:attempted-recon; sid:200024934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whvzgefttd.duckdns.org",nocase; classtype:attempted-recon; sid:200024935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"widadkamillah.github.io",nocase; classtype:attempted-recon; sid:200024936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"widget-dot-lbk-asistente-pre-principal.appspot.com",nocase; classtype:attempted-recon; sid:200024937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wild-star-f174.4882sddxshaee.workers.dev",nocase; classtype:attempted-recon; sid:200024938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"will31greativy31c24a.myportfolio.com",nocase; classtype:attempted-recon; sid:200024939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"windstream-net.firebaseapp.com",nocase; classtype:attempted-recon; sid:200024940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wingspantg.com",nocase; classtype:attempted-recon; sid:200024941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"winter-heart-4660.peasemeoff.workers.dev",nocase; classtype:attempted-recon; sid:200024942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"winter-thunder-a1ba.gdjklahdkjsadampie.workers.dev",nocase; classtype:attempted-recon; sid:200024943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wirdriqkrh.duckdns.org",nocase; classtype:attempted-recon; sid:200024944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wireconfirmation68c10a25442a3e13.blogspot.com",nocase; classtype:attempted-recon; sid:200024945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wires-business-starter.webflow.io",nocase; classtype:attempted-recon; sid:200024946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wise.uk.net",nocase; classtype:attempted-recon; sid:200024947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wisenheime.com",nocase; classtype:attempted-recon; sid:200024948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wisgjgjhtios.firebaseapp.com",nocase; classtype:attempted-recon; sid:200024949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wisgjgjhtios.web.app",nocase; classtype:attempted-recon; sid:200024950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wispy-glitter-dec5.extraspo.workers.dev",nocase; classtype:attempted-recon; sid:200024951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withered-paper-e878.woodmasonloop.workers.dev",nocase; classtype:attempted-recon; sid:200024952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withered-union-2058.on.fleek.co",nocase; classtype:attempted-recon; sid:200024953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withsupportaids.com",nocase; classtype:attempted-recon; sid:200024954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wkazisan.github.io",nocase; classtype:attempted-recon; sid:200024955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wkhwuduzkx.duckdns.org",nocase; classtype:attempted-recon; sid:200024956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wkmedcenter.com",nocase; classtype:attempted-recon; sid:200024957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wkpuqafprf.duckdns.org",nocase; classtype:attempted-recon; sid:200024958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wlc-idiomas.com",nocase; classtype:attempted-recon; sid:200024959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wljoamurbc.duckdns.org",nocase; classtype:attempted-recon; sid:200024960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wltcnt08201.blogspot.com",nocase; classtype:attempted-recon; sid:200024961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wondryvx.firebaseapp.com",nocase; classtype:attempted-recon; sid:200024962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"woodmetalstil.com",nocase; classtype:attempted-recon; sid:200024963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wop-intevents.ml",nocase; classtype:attempted-recon; sid:200024964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"worddocoffice365.myportfolio.com",nocase; classtype:attempted-recon; sid:200024965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"workprotocoles-com.webs.com",nocase; classtype:attempted-recon; sid:200024966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"world-js.com",nocase; classtype:attempted-recon; sid:200024967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"worldquant.live",nocase; classtype:attempted-recon; sid:200024968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wp-login.azurewebsites.net",nocase; classtype:attempted-recon; sid:200024969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wp1sl706.top",nocase; classtype:attempted-recon; sid:200024970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wpsoar.com",nocase; classtype:attempted-recon; sid:200024971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wptest.chopperward.com",nocase; classtype:attempted-recon; sid:200024972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wqatwjjpem.duckdns.org",nocase; classtype:attempted-recon; sid:200024973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wqdzx.nes881l.cn",nocase; classtype:attempted-recon; sid:200024974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wqsninvdlq.duckdns.org",nocase; classtype:attempted-recon; sid:200024975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wqxlcsvnib.duckdns.org",nocase; classtype:attempted-recon; sid:200024976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wrapittalk.org",nocase; classtype:attempted-recon; sid:200024977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wrestlingpei.ca",nocase; classtype:attempted-recon; sid:200024978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wrfzkmgucp.duckdns.org",nocase; classtype:attempted-recon; sid:200024979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wsi.no",nocase; classtype:attempted-recon; sid:200024980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wswqiuazze.duckdns.org",nocase; classtype:attempted-recon; sid:200024981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wtdiimbvnn.duckdns.org",nocase; classtype:attempted-recon; sid:200024982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wtfogcsdwk.duckdns.org",nocase; classtype:attempted-recon; sid:200024983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wtrrfbzocq.duckdns.org",nocase; classtype:attempted-recon; sid:200024984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wua.soundestlink.com",nocase; classtype:attempted-recon; sid:200024985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wuc.edu.gh",nocase; classtype:attempted-recon; sid:200024986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wv3vajpaeass.com",nocase; classtype:attempted-recon; sid:200024987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wvnhzkceup.duckdns.org",nocase; classtype:attempted-recon; sid:200024988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wvqmjdfxae.duckdns.org",nocase; classtype:attempted-recon; sid:200024989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wvw.persnasbancaxintrnet.informasperuinterkb.com",nocase; classtype:attempted-recon; sid:200024990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wvwsorare-com.blogspot.com",nocase; classtype:attempted-recon; sid:200024991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wvwstljbvf.duckdns.org",nocase; classtype:attempted-recon; sid:200024992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ww.bancaporinternet.interbank.pe.laprint.com",nocase; classtype:attempted-recon; sid:200024993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ww0911ww.myportfolio.com",nocase; classtype:attempted-recon; sid:200024994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ww1.ibkcredit.com",nocase; classtype:attempted-recon; sid:200024995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ww11.lbk-personas.website",nocase; classtype:attempted-recon; sid:200024996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwcdwithtesla.xs1.biz",nocase; classtype:attempted-recon; sid:200024997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwfmxfkbtl.duckdns.org",nocase; classtype:attempted-recon; sid:200024998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwieipnrdm.duckdns.org",nocase; classtype:attempted-recon; sid:200024999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwitau0comuy.x10.mx",nocase; classtype:attempted-recon; sid:200025000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwqfdc.hyperphp.com",nocase; classtype:attempted-recon; sid:200025001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwrnshketw.duckdns.org",nocase; classtype:attempted-recon; sid:200025002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwv-bombcrypto-log.com",nocase; classtype:attempted-recon; sid:200025003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwv.portalpersonas-bnncochile.cl.zebrapunk.world",nocase; classtype:attempted-recon; sid:200025004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--gp49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--gq49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--gr49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--gt49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--gu49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--gv49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--gw49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--gx49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--gy49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--h049329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--h149329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--h249329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--h349329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--h449329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--h549329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--h649329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--h749329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--h849329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--h949329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--ha49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hb49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hc49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hd49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--he49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hf49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hg49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hh49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hj49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hk49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hl49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hm49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hn49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hp49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hq49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hr49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--ht49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hu49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hv49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hw49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hx49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--hy49329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--j049329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www--wellsfargo--com--j149329d48d6c.wsipv6.com",nocase; classtype:attempted-recon; sid:200025047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-bitflyer-go-com-br.blogspot.com",nocase; classtype:attempted-recon; sid:200025048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-bltflyer.com",nocase; classtype:attempted-recon; sid:200025049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-cita-previa-en-linea-cr.yolasite.com",nocase; classtype:attempted-recon; sid:200025050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-cursosdigitalesmx-com.filesusr.com",nocase; classtype:attempted-recon; sid:200025051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-degelyehuda-org-il.filesusr.com",nocase; classtype:attempted-recon; sid:200025052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-dkb.eu",nocase; classtype:attempted-recon; sid:200025053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-dofus-com.fr",nocase; classtype:attempted-recon; sid:200025054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-europe564598-com.filesusr.com",nocase; classtype:attempted-recon; sid:200025055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-europessign-com.filesusr.com",nocase; classtype:attempted-recon; sid:200025056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-pancake-swap.com",nocase; classtype:attempted-recon; sid:200025057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-poligonnmatic.blogspot.com",nocase; classtype:attempted-recon; sid:200025058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www1.smbsacnd.icu",nocase; classtype:attempted-recon; sid:200025059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www1.smbscrad.icu",nocase; classtype:attempted-recon; sid:200025060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.amazaon.co.jp.login.awto.cn",nocase; classtype:attempted-recon; sid:200025061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.amazaon.co.jp.login.hdcharge.cn",nocase; classtype:attempted-recon; sid:200025062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.amazaon.co.jp.login.kvrwsvz.cn",nocase; classtype:attempted-recon; sid:200025063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.amazaon.co.jp.login.kwqqkrx.cn",nocase; classtype:attempted-recon; sid:200025064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.amazaon.co.jp.login.lseol.cn",nocase; classtype:attempted-recon; sid:200025065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.ameericanxsexpresss.com.gfzax.top",nocase; classtype:attempted-recon; sid:200025066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.ameericanxsexpresss.com.szaxc.top",nocase; classtype:attempted-recon; sid:200025067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.jcom.co.jp.login.bjgzcloud.com",nocase; classtype:attempted-recon; sid:200025068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.jcom.co.jp.login.vkia.cn",nocase; classtype:attempted-recon; sid:200025069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.jcom.co.jp.login.wten.cn",nocase; classtype:attempted-recon; sid:200025070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.jcom.co.jp.login.xuds.cn",nocase; classtype:attempted-recon; sid:200025071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.jp.mercari.login.com.eliwtni.cn",nocase; classtype:attempted-recon; sid:200025072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.jp.mercari.login.com.euoidfs.cn",nocase; classtype:attempted-recon; sid:200025073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.smbc-card.co.jplogin.qwkjika.cn",nocase; classtype:attempted-recon; sid:200025074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.smbc-card.co.jplogin.qwlgkbh.cn",nocase; classtype:attempted-recon; sid:200025075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.smbsacnd.icu",nocase; classtype:attempted-recon; sid:200025076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.smbscrad.icu",nocase; classtype:attempted-recon; sid:200025077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.vissa.co.jp.sdszsz.top",nocase; classtype:attempted-recon; sid:200025078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www3.cmtb.workers.dev",nocase; classtype:attempted-recon; sid:200025079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www3.idpass-net.nenkin.go.jp",nocase; classtype:attempted-recon; sid:200025080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwwhomedecoration.com",nocase; classtype:attempted-recon; sid:200025081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwww.adlookadmin.cn",nocase; classtype:attempted-recon; sid:200025082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wx3q6-liaaa-aaaad-qdgfa-cai.raw.ic0.app",nocase; classtype:attempted-recon; sid:200025083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wxfmhy.webwave.dev",nocase; classtype:attempted-recon; sid:200025084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wxginkrjaj.duckdns.org",nocase; classtype:attempted-recon; sid:200025085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wxletoqrcm.duckdns.org",nocase; classtype:attempted-recon; sid:200025086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wxqdc.hyperphp.com",nocase; classtype:attempted-recon; sid:200025087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wxvogqkena.duckdns.org",nocase; classtype:attempted-recon; sid:200025088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wxwmyiroue.duckdns.org",nocase; classtype:attempted-recon; sid:200025089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wyndhamresidencespalm.com",nocase; classtype:attempted-recon; sid:200025090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wzptpuycuk.duckdns.org",nocase; classtype:attempted-recon; sid:200025091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"x2ark.live",nocase; classtype:attempted-recon; sid:200025092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xaima728191.webcindario.com",nocase; classtype:attempted-recon; sid:200025093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xaimsuuq211.webcindario.com",nocase; classtype:attempted-recon; sid:200025094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xaxaporn.com",nocase; classtype:attempted-recon; sid:200025095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xbd.ixunce.cn",nocase; classtype:attempted-recon; sid:200025096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xbfdd.jgsszyy.cn",nocase; classtype:attempted-recon; sid:200025097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xbff.73919.cn",nocase; classtype:attempted-recon; sid:200025098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xbfnf.65918.cn",nocase; classtype:attempted-recon; sid:200025099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xbfnf.67526.cn",nocase; classtype:attempted-recon; sid:200025100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xbmrsycajm.duckdns.org",nocase; classtype:attempted-recon; sid:200025101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xcbdf.76131.cn",nocase; classtype:attempted-recon; sid:200025102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xcvdb.75612.cn",nocase; classtype:attempted-recon; sid:200025103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xdcxvfhjfk.duckdns.org",nocase; classtype:attempted-recon; sid:200025104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xdgr.wq27an.cn",nocase; classtype:attempted-recon; sid:200025105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xdykodaztm.duckdns.org",nocase; classtype:attempted-recon; sid:200025106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xehtyqwexk.duckdns.org",nocase; classtype:attempted-recon; sid:200025107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xerodermas.com",nocase; classtype:attempted-recon; sid:200025108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xertesgtfu.duckdns.org",nocase; classtype:attempted-recon; sid:200025109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xertwbhbdk.duckdns.org",nocase; classtype:attempted-recon; sid:200025110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xevueanzbe.duckdns.org",nocase; classtype:attempted-recon; sid:200025111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xfbfj.lygszyy.cn",nocase; classtype:attempted-recon; sid:200025112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xfeoxxokua9.typeform.com",nocase; classtype:attempted-recon; sid:200025113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xfinniityinox.weebly.com",nocase; classtype:attempted-recon; sid:200025114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xfullview.duia.ro",nocase; classtype:attempted-recon; sid:200025115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xfxsrgxxdt.duckdns.org",nocase; classtype:attempted-recon; sid:200025116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xghlsp.com",nocase; classtype:attempted-recon; sid:200025117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xikvybaryi.duckdns.org",nocase; classtype:attempted-recon; sid:200025118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xitwlsuhcs.duckdns.org",nocase; classtype:attempted-recon; sid:200025119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xixynrrkay.duckdns.org",nocase; classtype:attempted-recon; sid:200025120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xjfdgdfhgdhu.hostfree.pw",nocase; classtype:attempted-recon; sid:200025121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xjoxsfoqnp.duckdns.org",nocase; classtype:attempted-recon; sid:200025122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xkwpyqfxci.duckdns.org",nocase; classtype:attempted-recon; sid:200025123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xlizueggpm.duckdns.org",nocase; classtype:attempted-recon; sid:200025124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xlsv.oalt.cfgliders.com.",nocase; classtype:attempted-recon; sid:200025125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xmawdxtvxz.duckdns.org",nocase; classtype:attempted-recon; sid:200025126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xmidasx.my.id",nocase; classtype:attempted-recon; sid:200025127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn----ctbeu0aamfekp0m.xn--p1ai",nocase; classtype:attempted-recon; sid:200025128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--allgrolokalnie-x4b.pl",nocase; classtype:attempted-recon; sid:200025129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--conta-atualiza-o-snb5e.weebly.com",nocase; classtype:attempted-recon; sid:200025130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--f1a.firebaseapp.com",nocase; classtype:attempted-recon; sid:200025131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--f1a.web.app",nocase; classtype:attempted-recon; sid:200025132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--leboncoin-paiement-scuris-uicf.com",nocase; classtype:attempted-recon; sid:200025133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--leboncoin-vrification-l5b.com",nocase; classtype:attempted-recon; sid:200025134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--lnstagramhep-ncc.com",nocase; classtype:attempted-recon; sid:200025135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--opnsa-osac.com",nocase; classtype:attempted-recon; sid:200025136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--realizaoesefinacas-evb.com",nocase; classtype:attempted-recon; sid:200025137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--realizaoesfinacas-gsb.com",nocase; classtype:attempted-recon; sid:200025138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--w1ai.web.app",nocase; classtype:attempted-recon; sid:200025139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn34r.app.link",nocase; classtype:attempted-recon; sid:200025140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xnew7.ddnsking.com",nocase; classtype:attempted-recon; sid:200025141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xnguksaqqx.duckdns.org",nocase; classtype:attempted-recon; sid:200025142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xq.rqn5y.hubcom.vc.",nocase; classtype:attempted-recon; sid:200025143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xqajowrecv.duckdns.org",nocase; classtype:attempted-recon; sid:200025144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xqcpeou.top",nocase; classtype:attempted-recon; sid:200025145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xsbrookshhjx.top",nocase; classtype:attempted-recon; sid:200025146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xvalhalla.me",nocase; classtype:attempted-recon; sid:200025147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xvfnwxcidx.duckdns.org",nocase; classtype:attempted-recon; sid:200025148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xxkl.onedrive0001.workers.dev",nocase; classtype:attempted-recon; sid:200025149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xxkqgqhlij.duckdns.org",nocase; classtype:attempted-recon; sid:200025150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xxphase.office0.workers.dev",nocase; classtype:attempted-recon; sid:200025151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xxx-com-dot-c2c01-531c7.uc.r.appspot.com",nocase; classtype:attempted-recon; sid:200025152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xxxhcqqsym8.xyz",nocase; classtype:attempted-recon; sid:200025153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xynitoofig.duckdns.org",nocase; classtype:attempted-recon; sid:200025154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xythndo.punctulcentral.org",nocase; classtype:attempted-recon; sid:200025155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xytvjrzspu.duckdns.org",nocase; classtype:attempted-recon; sid:200025156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xyuubtkniv.duckdns.org",nocase; classtype:attempted-recon; sid:200025157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xz685.duckdns.org",nocase; classtype:attempted-recon; sid:200025158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"y7834679543.wixsite.com",nocase; classtype:attempted-recon; sid:200025159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yachtcalc.com",nocase; classtype:attempted-recon; sid:200025160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo-jp.iall.cc",nocase; classtype:attempted-recon; sid:200025161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo-jp.isap.cc",nocase; classtype:attempted-recon; sid:200025162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo-jp.sjfyhi.shop",nocase; classtype:attempted-recon; sid:200025163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo-jp.ytpzqz.shop",nocase; classtype:attempted-recon; sid:200025164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo-mail-108320.square.site",nocase; classtype:attempted-recon; sid:200025165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo.mailservice.workers.dev",nocase; classtype:attempted-recon; sid:200025166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo.onlinemail.workers.dev",nocase; classtype:attempted-recon; sid:200025167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoomail-100163.square.site",nocase; classtype:attempted-recon; sid:200025168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoomail-100663.square.site",nocase; classtype:attempted-recon; sid:200025169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoomail-105222.square.site",nocase; classtype:attempted-recon; sid:200025170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahuomall.square.site",nocase; classtype:attempted-recon; sid:200025171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yairix.github.io",nocase; classtype:attempted-recon; sid:200025172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yal.su",nocase; classtype:attempted-recon; sid:200025173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yandus.info",nocase; classtype:attempted-recon; sid:200025174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yape-fake.vercel.app",nocase; classtype:attempted-recon; sid:200025175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yaqoobi.org",nocase; classtype:attempted-recon; sid:200025176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yatienadzli.com",nocase; classtype:attempted-recon; sid:200025177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yayanti.com",nocase; classtype:attempted-recon; sid:200025178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ybplzyacjw.duckdns.org",nocase; classtype:attempted-recon; sid:200025179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yc2.nanningboring.com",nocase; classtype:attempted-recon; sid:200025180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yca1yi.webwave.dev",nocase; classtype:attempted-recon; sid:200025181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ychcospalk.duckdns.org",nocase; classtype:attempted-recon; sid:200025182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ychhk-com.preview-domain.com",nocase; classtype:attempted-recon; sid:200025183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ycnchkbzri.duckdns.org",nocase; classtype:attempted-recon; sid:200025184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ycxvfrjdit.duckdns.org",nocase; classtype:attempted-recon; sid:200025185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yd.i5ho8.hubcom.vc.",nocase; classtype:attempted-recon; sid:200025186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ydkqtsyvdn.duckdns.org",nocase; classtype:attempted-recon; sid:200025187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ydobfwgmxl.duckdns.org",nocase; classtype:attempted-recon; sid:200025188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yeefoundation.org",nocase; classtype:attempted-recon; sid:200025189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yellowglossyacrobat.suridadbancolom.repl.co",nocase; classtype:attempted-recon; sid:200025190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yesgeenews.com",nocase; classtype:attempted-recon; sid:200025191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yesterson2778hsg.liveblog365.com",nocase; classtype:attempted-recon; sid:200025192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yetjgifgxp.duckdns.org",nocase; classtype:attempted-recon; sid:200025193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yhfdb.wta4ji.cn",nocase; classtype:attempted-recon; sid:200025194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yhslijngqt.duckdns.org",nocase; classtype:attempted-recon; sid:200025195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yilqwaqfmw.duckdns.org",nocase; classtype:attempted-recon; sid:200025196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yioklasaduj.co.vu",nocase; classtype:attempted-recon; sid:200025197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yip.su",nocase; classtype:attempted-recon; sid:200025198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yjeuycswng.duckdns.org",nocase; classtype:attempted-recon; sid:200025199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yjuk.yuanqiw.cn",nocase; classtype:attempted-recon; sid:200025200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yjvmifvpco.duckdns.org",nocase; classtype:attempted-recon; sid:200025201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ykgsiubzll.duckdns.org",nocase; classtype:attempted-recon; sid:200025202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ykojktjpol.duckdns.org",nocase; classtype:attempted-recon; sid:200025203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ylnvqzt.cn",nocase; classtype:attempted-recon; sid:200025204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ylogujgntf.duckdns.org",nocase; classtype:attempted-recon; sid:200025205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yma1ll0g0n.odoo.com",nocase; classtype:attempted-recon; sid:200025206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ynghgox4.shop",nocase; classtype:attempted-recon; sid:200025207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yniykzassaz.hostfree.pw",nocase; classtype:attempted-recon; sid:200025208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yodsecinserv.firebaseapp.com",nocase; classtype:attempted-recon; sid:200025209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yodsecinserv.web.app",nocase; classtype:attempted-recon; sid:200025210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yogdarshan.com",nocase; classtype:attempted-recon; sid:200025211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yogicpa.com",nocase; classtype:attempted-recon; sid:200025212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yogini-polygonbc.blogspot.com",nocase; classtype:attempted-recon; sid:200025213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yonfxspbnv.duckdns.org",nocase; classtype:attempted-recon; sid:200025214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"youforgotyoui.firebaseapp.com",nocase; classtype:attempted-recon; sid:200025215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"youmustfeelgreat.itsaol.com",nocase; classtype:attempted-recon; sid:200025216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"youn.bxxnskkdkdkrkrnfnf.workers.dev",nocase; classtype:attempted-recon; sid:200025217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"young-salad-b064.dealtrap5421683.workers.dev",nocase; classtype:attempted-recon; sid:200025218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"your-info-blog.info",nocase; classtype:attempted-recon; sid:200025219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yousee-refusion.web.app",nocase; classtype:attempted-recon; sid:200025220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"youtube-b24.xyz",nocase; classtype:attempted-recon; sid:200025221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ypeyy-qyaaa-aaaad-qdmwq-cai.raw.ic0.app",nocase; classtype:attempted-recon; sid:200025222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yple-selectionevents.ml",nocase; classtype:attempted-recon; sid:200025223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ypnfhunbnk.duckdns.org",nocase; classtype:attempted-recon; sid:200025224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ypsobpgilz.duckdns.org",nocase; classtype:attempted-recon; sid:200025225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yqeajaipyi.duckdns.org",nocase; classtype:attempted-recon; sid:200025226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yspxbunkdk.duckdns.org",nocase; classtype:attempted-recon; sid:200025227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yted23.hyperphp.com",nocase; classtype:attempted-recon; sid:200025228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ytek.co.il",nocase; classtype:attempted-recon; sid:200025229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ytgfb.mnjnlaj.cn",nocase; classtype:attempted-recon; sid:200025230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ytjyhegf.byethost32.com",nocase; classtype:attempted-recon; sid:200025231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ytut.wsyzyy.cn",nocase; classtype:attempted-recon; sid:200025232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yuc-b4cc2d.ingress-bonde.ewp.live",nocase; classtype:attempted-recon; sid:200025233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yuhgbv2.s3.us-west-004.backblazeb2.com",nocase; classtype:attempted-recon; sid:200025234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yuiooklo6778.liveblog365.com",nocase; classtype:attempted-recon; sid:200025235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yuiqwdendsi2312.liveblog365.com",nocase; classtype:attempted-recon; sid:200025236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yurb.18n2cn.cn",nocase; classtype:attempted-recon; sid:200025237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yuryo-anzen.com",nocase; classtype:attempted-recon; sid:200025238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yutourange.t.justns.ru",nocase; classtype:attempted-recon; sid:200025239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yuyitkomalas.co.vu",nocase; classtype:attempted-recon; sid:200025240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yuyumitsa.co.vu",nocase; classtype:attempted-recon; sid:200025241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ywfevfyryx.duckdns.org",nocase; classtype:attempted-recon; sid:200025242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ywhzogbmvg.duckdns.org",nocase; classtype:attempted-recon; sid:200025243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ywxo.mjt.lu",nocase; classtype:attempted-recon; sid:200025244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yxhecakhwu.duckdns.org",nocase; classtype:attempted-recon; sid:200025245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yy6688.shop",nocase; classtype:attempted-recon; sid:200025246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yyqptjrgji.duckdns.org",nocase; classtype:attempted-recon; sid:200025247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yztihnillk.duckdns.org",nocase; classtype:attempted-recon; sid:200025248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zboxlearning.com",nocase; classtype:attempted-recon; sid:200025249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zbvdqjuxbo.duckdns.org",nocase; classtype:attempted-recon; sid:200025250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zciroternind2718.liveblog365.com",nocase; classtype:attempted-recon; sid:200025251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zcmfnhhvlv.duckdns.org",nocase; classtype:attempted-recon; sid:200025252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zcplhuoupj.duckdns.org",nocase; classtype:attempted-recon; sid:200025253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zculdga.cn",nocase; classtype:attempted-recon; sid:200025254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zdqjmugytd.duckdns.org",nocase; classtype:attempted-recon; sid:200025255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zearty.co.vu",nocase; classtype:attempted-recon; sid:200025256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zeawzc.hyperphp.com",nocase; classtype:attempted-recon; sid:200025257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zeblublyvu.duckdns.org",nocase; classtype:attempted-recon; sid:200025258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zeiron.net.in",nocase; classtype:attempted-recon; sid:200025259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zerino-io.tech",nocase; classtype:attempted-recon; sid:200025260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zerione.io",nocase; classtype:attempted-recon; sid:200025261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zerjon-io.tech",nocase; classtype:attempted-recon; sid:200025262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zeroin-io.tech",nocase; classtype:attempted-recon; sid:200025263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zetkai.com",nocase; classtype:attempted-recon; sid:200025264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zezyoucbji.duckdns.org",nocase; classtype:attempted-recon; sid:200025265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zfzidgeevo.duckdns.org",nocase; classtype:attempted-recon; sid:200025266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zgdmbzjgqa.duckdns.org",nocase; classtype:attempted-recon; sid:200025267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zheard.net",nocase; classtype:attempted-recon; sid:200025268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zi0034034323.web.app",nocase; classtype:attempted-recon; sid:200025269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zi992883923923.web.app",nocase; classtype:attempted-recon; sid:200025270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zihs1w01.myportfolio.com",nocase; classtype:attempted-recon; sid:200025271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zimbabq.cn",nocase; classtype:attempted-recon; sid:200025272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zimbra-36422.firebaseapp.com",nocase; classtype:attempted-recon; sid:200025273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zimbra-36422.web.app",nocase; classtype:attempted-recon; sid:200025274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zimbra-customercare.berthascholarship.org",nocase; classtype:attempted-recon; sid:200025275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zimbra-fd9fd.firebaseapp.com",nocase; classtype:attempted-recon; sid:200025276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zimuktxjwp.duckdns.org",nocase; classtype:attempted-recon; sid:200025277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zimupdate00.nodster.ca",nocase; classtype:attempted-recon; sid:200025278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ziofwljoai.duckdns.org",nocase; classtype:attempted-recon; sid:200025279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zipmstgslt.duckdns.org",nocase; classtype:attempted-recon; sid:200025280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ziweiskins.com",nocase; classtype:attempted-recon; sid:200025281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zjvaqtuwhp.duckdns.org",nocase; classtype:attempted-recon; sid:200025282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zkeatigmow.duckdns.org",nocase; classtype:attempted-recon; sid:200025283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zkmbvqlxln.duckdns.org",nocase; classtype:attempted-recon; sid:200025284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zkql52.hyperphp.com",nocase; classtype:attempted-recon; sid:200025285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zktxuiiosi.duckdns.org",nocase; classtype:attempted-recon; sid:200025286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zmzxtxqpxt.duckdns.org",nocase; classtype:attempted-recon; sid:200025287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"znnhhgwade.duckdns.org",nocase; classtype:attempted-recon; sid:200025288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zojmaqb.top",nocase; classtype:attempted-recon; sid:200025289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zonasegurascajapiura.handshakelimo.com",nocase; classtype:attempted-recon; sid:200025290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zonasegurascajapiura.irmaocorporation.com",nocase; classtype:attempted-recon; sid:200025291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zonaseguravia.lbetalbcp-pe.com",nocase; classtype:attempted-recon; sid:200025292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zonasengurabetasbcp.com",nocase; classtype:attempted-recon; sid:200025293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zonavirtualenpinchicha.com",nocase; classtype:attempted-recon; sid:200025294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zpnrmqljla.duckdns.org",nocase; classtype:attempted-recon; sid:200025295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zpoffucqdw.duckdns.org",nocase; classtype:attempted-recon; sid:200025296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zqbwbbhkdi.duckdns.org",nocase; classtype:attempted-recon; sid:200025297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zqmlp-taaaa-aaaad-qdmsa-cai.ic.fleek.co",nocase; classtype:attempted-recon; sid:200025298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zrlqirdnsz.duckdns.org",nocase; classtype:attempted-recon; sid:200025299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zrtihwqjkq.duckdns.org",nocase; classtype:attempted-recon; sid:200025300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zrwsx.rf.gd",nocase; classtype:attempted-recon; sid:200025301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ztxbltaxrd.duckdns.org",nocase; classtype:attempted-recon; sid:200025302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zueilikevd.duckdns.org",nocase; classtype:attempted-recon; sid:200025303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zuriescents.com",nocase; classtype:attempted-recon; sid:200025304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zvdn.85973.cn",nocase; classtype:attempted-recon; sid:200025305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zvento.com",nocase; classtype:attempted-recon; sid:200025306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zvosthwstc.duckdns.org",nocase; classtype:attempted-recon; sid:200025307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zwabnbaobn.duckdns.org",nocase; classtype:attempted-recon; sid:200025308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zwpalaojga.duckdns.org",nocase; classtype:attempted-recon; sid:200025309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zxjekdpsha.duckdns.org",nocase; classtype:attempted-recon; sid:200025310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zxq11400office365login8824lkv.myportfolio.com",nocase; classtype:attempted-recon; sid:200025311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zycggnoray.duckdns.org",nocase; classtype:attempted-recon; sid:200025312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"00f74ba44b7deb986e0d6fbc1cba55c836137b99c4-apidata.googleusercontent.com",nocase; http_uri; content:"/download/storage/v1/b/riltool/o/karasecondautoindex.html?jk=afshe3ud55ujymwt7g-nfhyc-y4wjd_isbuvieaupnnmfygg0r46svxknhxfb-vzjxjkedtybh8j12breebxuuhyttcdjhzpxpm83gyp3tjk0xwitv10l6jaopebdrpzzguknjfok-tx_cheqhulg0jexcdxdz031zy5cya54onnehhajo1rgzlx4ud5yybmr9tppfipz2w15yqcb-i7uw1ab1qkmxdv_e3z8efk6wjgdnpp2icmua40yohitnuqzz7rmfecnm4vbvwjjbygxed2j2wny_ctr6nmggbkqkz6qkwe-d3ywpi7hxjsfjh771psarid7xkiwiribetzlxzasbtsdjpbdws2xagxc4nhssvkumjiadeujb0typstsmw9bdpqdapzgv7xr5kdkk-sdx89pri3q4zv5rjebnxq2w7rolxp5t4pjruqcp9tlgnslfxppoulfujozu99s-ppvukrsdt80_67orgekb4xazmtmeckrzmjmqvpkozf60cm5n9akplma_oerkqyvokpzzhctxypr_pvmn8bd_gfahsuziq6camxv1q9ext5mp89_fhla8m4butnvzl3ah2zn_xu3lqjer3sangepchjzjkan0rva-ecxsgahrioiajbm3rgv8ifkypnzfql_ihn-tn5frzv5dx_zhkbaagvtfjzo-egdfucw4hwmj-jl3jlggfbio0gst9muk-uuyexzswc-yoqp-6vzeqfduzeuwwokkgfothfp7vygg-juj-hbhq3htdamgdnujafqeqlf18kxqkadps4ukml5sinyfbdrs08xn69q3khjf-7eyi6shlnkizhsc-od3c1my39oji25z4k3ips4ihajl4cfzwbtjkjkxwdp3efpdjoibexhdtttrec7tpbg4tb9gabmjgsj7bxa-09ea_1uxxal4uunnrbqfg9k-mtvn_amduzvytkjptunf3st0l4v7hbvgdm14z17fqejckd4ur1ahhj&amp\;isca=1",nocase; classtype:attempted-recon; sid:200025313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0nebet.com",nocase; http_uri; content:"/bros/",nocase; classtype:attempted-recon; sid:200025314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1drv.ms",nocase; http_uri; content:"/o/s!bcxisnewh_cnvrnkj_y2f1eccpwq?e=gvtbd8pbpealap_ppbzgja&amp\;at=9",nocase; classtype:attempted-recon; sid:200025315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1drv.ms",nocase; http_uri; content:"/u/s!ansvuchdbmcsgrankk4avnfo3z2j",nocase; classtype:attempted-recon; sid:200025316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1drv.ms",nocase; http_uri; content:"/u/s!aqco4anjd4k_gr9ntde-jsrxmkjs",nocase; classtype:attempted-recon; sid:200025317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1drv.ms",nocase; http_uri; content:"/u/s!asazsxxj27tygrqveud6b2tyextk",nocase; classtype:attempted-recon; sid:200025318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1drv.ms",nocase; http_uri; content:"/w/s!aqb1sjv7nuauan8etr6o4rb2z-8?e=siebms",nocase; classtype:attempted-recon; sid:200025319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20khvylyn.com",nocase; http_uri; content:"/go/?www.orange.orangao.c%cd%8fo%cd%8fm%cd%8f",nocase; classtype:attempted-recon; sid:200025320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"28ecne20f9u.securetnet.com",nocase; http_uri; content:"/bbva/592cf4/425bdbd3-91cf-4e9f-9498-7a06b3ad75ec/?test=1",nocase; classtype:attempted-recon; sid:200025321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2dr.eu",nocase; http_uri; content:"/6wwnqr",nocase; classtype:attempted-recon; sid:200025322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3rdstreetmarket.com",nocase; http_uri; content:"/wp-content/themes/3rdst/8-login-form/",nocase; classtype:attempted-recon; sid:200025323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"50in50marathonquest.com",nocase; http_uri; content:"/wp-includes/wauth-login-present-origin-cob/",nocase; classtype:attempted-recon; sid:200025324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"626525.selcdn.ru",nocase; http_uri; content:"/inv/index-rouncube.html",nocase; classtype:attempted-recon; sid:200025325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"626525.selcdn.ru",nocase; http_uri; content:"/kd_server/index.html#abuse-uk@example.com",nocase; classtype:attempted-recon; sid:200025326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"626525.selcdn.ru",nocase; http_uri; content:"/rfq1/roundcube-rfq.html",nocase; classtype:attempted-recon; sid:200025327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"626525.selcdn.ru",nocase; http_uri; content:"/rfq2/roundcube.html",nocase; classtype:attempted-recon; sid:200025328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7b631qxp.r.us-west-2.awstrack.me",nocase; http_uri; content:"/l0/https:%2f%2flnkd.in%2fgw2x_btv/1/01010181d5b4121d-ad8975c1-fc53-41b2-bad9-ecb97743ffd4-000000/p1odbvtfelzzx9amvwo_h954np8=278",nocase; classtype:attempted-recon; sid:200025329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7b631qxp.r.us-west-2.awstrack.me",nocase; http_uri; content:"/l0/https:%2f%2flnkd.in%2fgw2x_btv/1/01010181d5fb3b48-737ccb85-d5e2-4457-a851-976cc0f4bb46-000000/7s-v3-kzdc4bgzegonycqrjgcoi=278",nocase; classtype:attempted-recon; sid:200025330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7b631qxp.r.us-west-2.awstrack.me",nocase; http_uri; content:"/l0/https:%2f%2flnkd.in%2fgw2x_btv/1/01010181d603af46-160c71a9-c106-4e8a-8d41-5f8c8fea17a9-000000/c9_d4zic3z0jjatwzj75zswof1w=278",nocase; classtype:attempted-recon; sid:200025331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7b631qxp.r.us-west-2.awstrack.me",nocase; http_uri; content:"/l0/https:%2f%2flnkd.in%2fgw2x_btv/1/01010181d641f3ae-89c7fa59-82a2-4f6b-b2a4-cdc8626f95fa-000000/hyy7ncrmtxieavrn3px4goieeos=278",nocase; classtype:attempted-recon; sid:200025332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"99mbet.com",nocase; http_uri; content:"/assets/css/api.php",nocase; classtype:attempted-recon; sid:200025333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"99mbet.com",nocase; http_uri; content:"/assets/img-temp/api.php",nocase; classtype:attempted-recon; sid:200025334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"99mbet.com",nocase; http_uri; content:"/assets/js/api.php",nocase; classtype:attempted-recon; sid:200025335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a-q-f.com",nocase; http_uri; content:"/openpc/directlogin.do",nocase; classtype:attempted-recon; sid:200025336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abcsubmit.com",nocase; http_uri; content:"/view/id_1ftb3gemh_1ogg?utm=abcsubmit",nocase; classtype:attempted-recon; sid:200025337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abcsubmit.com",nocase; http_uri; content:"/view/id_1ftb7k8ik_11di?utm=abcsubmit",nocase; classtype:attempted-recon; sid:200025338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?passive=1209600&continue=https://sites.google.com/view/viewbill-bt-1/bt&followup=https://sites.google.com/view/viewbill-bt-1/bt",nocase; classtype:attempted-recon; sid:200025339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/1lordman1man3/oscman.html&followup=https://storage.cloud.google.com/1lordman1man3/oscman.html",nocase; classtype:attempted-recon; sid:200025340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/1lordman1man3/oscman2.html&followup=https://storage.cloud.google.com/1lordman1man3/oscman2.html",nocase; classtype:attempted-recon; sid:200025341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/appspotv450i7r8h9vf9y6yt8uiuft58f7uf5yye36u0jtyf78uuyfyy/index.html&followup=https://storage.cloud.google.com/appspotv450i7r8h9vf9y6yt8uiuft58f7uf5yye36u0jtyf78uuyfyy/index.html",nocase; classtype:attempted-recon; sid:200025342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/employt44to49cclrlolcrl94lnlxo.appspot.com/index.html&followup=https://storage.cloud.google.com/employt44to49cclrlolcrl94lnlxo.appspot.com/index.html",nocase; classtype:attempted-recon; sid:200025343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/maintainancecomponeta.appspot.com/mineindex.html&followup=https://storage.cloud.google.com/maintainancecomponeta.appspot.com/mineindex.html",nocase; classtype:attempted-recon; sid:200025344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/officpcpspbcncuser.appspot.com/index.htm&followup=https://storage.cloud.google.com/officpcpspbcncuser.appspot.com/index.htm",nocase; classtype:attempted-recon; sid:200025345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.wenshublog.cn",nocase; http_uri; content:"/servicelogin?passive=1209600&continue=https://accounts.google.com/&followup=https://accounts.google.com/",nocase; classtype:attempted-recon; sid:200025346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adclick.g.doubleclick.net",nocase; http_uri; content:"/pcs/click?xai=akaojsunb9fkunzdskcmnvc7k4ilbqldjtqyxh55se5siie7_sz6o4bvopeyalqwilm3ynhjhfqkmqqt8arqeyog3nqodnjg7dyxijqeyvk13ialydptaurms3idttmwxxbmlnxqfhuwi4auxex0vpkwveh8nbkwvafmggp3te-uhqs10lqbw-wf4vbn1fxoowmkigyhq9rssp9f9yweynmk3xfolpqenadu6pw-zdqshpwudzizoynna2zyfbwikrqemmarfn4n8-ur17f7jxn4bbgswncm91vbhohvavsqu3d1ffftv-nrzzqosighwkxnvhdkoh0ebqdwnw-weerba2y190qsuoxnj6nemiezvugcvdhmhh1ruxhrta0ox6fdfvy8oy5bcmpjpu4acti8qq9ikwv709ifjzpa5cykdv-umhvizct_omqmfjvwaay75niuslhmcmwsclruqvddesnj3pactiaa2akzr3xnxruxhdtzteodnqdjikpn8w0b2_-xsq5iwjb5yewwqf0eom3cup8wzuiqnp19_yffgzejeb_wkzfndo57-s62itg2ps_pain7wuqbo9_lwqmg5fauwykwxahrs8u6qbjpt2dnb_ll-eclk1rvvrejcklikyitta9znxcggldlcanumqctyw8p5rjhzv_ergpq2ljrkvj9n3wyyzmmbtditkgusbm2xbza3or03jqbj2ouz70xz9rsax_1gdv0kvf-qgjfrj1q710fpca7m5b_rnncxq0aj32kjgglnfxpq0gv8dce5eca7f7xcxq-2ytmwetn17sthflvtrdpnx6ckbfpzb8kqr68dgsd_1lls3q7vnynhmuas1zqtms181z-aoiovwvruddnmjjmmj0vrbms4rs4sxnh8axz1u7leqsfu2gxkdikh-mfyxr_esk3xlk5d6nvs3nzaj5tb-aoy1r3-gejxcarmbuaaaf-232jtut7obtnlqrzer7akhbxwwargxnddahlj0dvu_14nyg-159ripldhx_ddjwbzyg0uswoae_lumqeanvjxxal-qayscrxlbn44mviwz_k0-7t7ntrznmwecmhlsi9ju63gppipnant1fxd7qex94feax7aduauih7t0cpvwrbv9pp6adlkgx_su0_o_mk_rs&amp\;sai=amfl-ytgmc8fwflydkmodfohdlmlxzv2toby33ijninvlvbmkqeagbrrkpf-04tiauhfpbc0va0xuyy_zt2jq59gsdix1lkfwnim0k_ko7qgbsempnvhuop6ydbny_ccvcxusg1prhod0evny-rfwwqv87dptjbuj0ynqwpkdpw5&amp\;sig=cg0arkjszmxhunqm-g5z&amp\;pr=2:2.900839&amp\;fbs_aeid=%5bgw_fbsaeid%5d&amp\;urlfix=1&amp\;nx=70&amp\;ny=208&amp\;dim=160x600&amp\;adurl=https://t.myvisualiq.net/click_pixel%3fet%3dc%26ago%3d212%26ao%3d546%26aca%3d26737887%26si%3d7192763%26ci%3d161117887%26pi%3d317760010%26ad%3d512366295%26sv1%3d%5bkeyword_id%5d%26advt%3d4470646%26chnl%3d-7%26vndr%3d115%26sz%3d6585%26u%3dred%3dhttps://50046kogqj57eellstisgclgiqt1d7ircnq0763nab1kc47p17nch3o.siasky.net/#a@b.com",nocase; classtype:attempted-recon; sid:200025347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"admin.fifoundry.net",nocase; http_uri; content:"/en/bellcocreditunion/",nocase; classtype:attempted-recon; sid:200025348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoioesn.aseoseiseaccn.uqmzwu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200025349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesooesn.aseoseseaccn.uqmzwu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200025350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoosesn.aseoseesceacn.uqmzwu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200025351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesosesn.aseoseeseacn.vqmusu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200025352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aijcs.blogspot.com",nocase; http_uri; content:"/2005/03/colourful-life-of-aij.html",nocase; classtype:attempted-recon; sid:200025353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aiousolvedassignment.com",nocase; http_uri; content:"/svxc/index1.php",nocase; classtype:attempted-recon; sid:200025354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"air.power.livemailsupport.com",nocase; http_uri; content:"/royal%20malaysian%20airforce%20web%20client%20sign%20in.html",nocase; classtype:attempted-recon; sid:200025355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aksehirevdenevenakliyat.com",nocase; http_uri; content:"/yonetici/newdocs/gdoccc/",nocase; classtype:attempted-recon; sid:200025356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"albunat.com",nocase; http_uri; content:"/juventinopayble/index.html",nocase; classtype:attempted-recon; sid:200025357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alharaj-alalmi.com",nocase; http_uri; content:"/index.html",nocase; classtype:attempted-recon; sid:200025358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ameri7bfirst.com",nocase; http_uri; content:"/recoverny?=session",nocase; classtype:attempted-recon; sid:200025359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ameri7bfirst.com",nocase; http_uri; content:"/session/americafirst.com/domain/",nocase; classtype:attempted-recon; sid:200025360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ams3.digitaloceanspaces.com",nocase; http_uri; content:"/25536272172/login.microsoftonline.htm",nocase; classtype:attempted-recon; sid:200025361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ams3.digitaloceanspaces.com",nocase; http_uri; content:"/404cloudfile/indexx.html",nocase; classtype:attempted-recon; sid:200025362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ams3.digitaloceanspaces.com",nocase; http_uri; content:"/46572829230sharedfiles/microsoftonline.htm",nocase; classtype:attempted-recon; sid:200025363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anekaslot.com",nocase; http_uri; content:"/jps/webmail_reset.htm",nocase; classtype:attempted-recon; sid:200025364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"api.addthis.com",nocase; http_uri; content:"/oexchange/0.8/wrap/opengraph?url=ahr0chm6ly93zxetnmrlodiud2vilmfwcc8znzg1mje5lze1lziwmjfjdw5plmn6nto1nibbttu6ntygqu13zwjtyxn0zxi5lze1lziwmjeznzg1mjfjdw5plmn6nto1nibbttu6ntygqu13zwjtyxn0zxiznzg1mje5lze1lziwmjfjdw5plmn6nto1nibbttu6ntygqu0znzg1mjf3zwjtyxn0zxi5lze1lziwmjfjdw5plmn6nto1nibbttm3oduymtu6ntygqu13zwjtyxn0zxiznzg1mjejd2vibwfzdgvyqgn1bmkuy3o=",nocase; classtype:attempted-recon; sid:200025365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"api.whatsapp.com",nocase; http_uri; content:"/message/c3upfo4mvzsgg1?autoload=1&amp\;app_absent=0",nocase; classtype:attempted-recon; sid:200025366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-suisip.blogspot.com",nocase; http_uri; content:"/official",nocase; classtype:attempted-recon; sid:200025367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.box.com",nocase; http_uri; content:"/s/x6agocx9zvj049azirk4aw3xrqdedqhl",nocase; classtype:attempted-recon; sid:200025368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.box.com",nocase; http_uri; content:"/s/ymr0ltw3hmn8icxebz16gjhcyhqa49w4",nocase; classtype:attempted-recon; sid:200025369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.pandadoc.com",nocase; http_uri; content:"/document/27bcdebd7736cefa2575f4f56d1439096536f544",nocase; classtype:attempted-recon; sid:200025370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.pandadoc.com",nocase; http_uri; content:"/p/064ca177fcb7d3b79b1a0de5fb00ade981aeff90?",nocase; classtype:attempted-recon; sid:200025371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.pandadoc.com",nocase; http_uri; content:"/p/26bcb52213a6d759d76014ff4e11c37cae6ae56c",nocase; classtype:attempted-recon; sid:200025372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.pandadoc.com",nocase; http_uri; content:"/p/27bcdebd7736cefa2575f4f56d1439096536f544",nocase; classtype:attempted-recon; sid:200025373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appurl.io",nocase; http_uri; content:"/abg7_xbalh",nocase; classtype:attempted-recon; sid:200025374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appurl.io",nocase; http_uri; content:"/kektfripag",nocase; classtype:attempted-recon; sid:200025375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"at-e.co.jp",nocase; http_uri; content:"/tryu/secure.business.bt.com/app/",nocase; classtype:attempted-recon; sid:200025376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atfdt.com",nocase; http_uri; content:"/cn/accnt/dynamics/iamlrr/controller.php",nocase; classtype:attempted-recon; sid:200025377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atlanticcity.com",nocase; http_uri; content:"/wordpress/wp-admin/user/public/tolbox/",nocase; classtype:attempted-recon; sid:200025378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-promotions.com",nocase; http_uri; content:"/shop/v1/?vn=ctv-tfnlinkbot-pc4-cos-usr-bdl2-alt-wrl-wrle-cc1-cic-cf4-dpf&chatmessage=false&slidechat=false",nocase; classtype:attempted-recon; sid:200025379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attempted-info-submit.com",nocase; http_uri; content:"/login.php",nocase; classtype:attempted-recon; sid:200025380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azeioaz.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200025381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baovesusonglcxt.com",nocase; http_uri; content:"/wp-includes/index.html",nocase; classtype:attempted-recon; sid:200025382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bcbcoaching.com",nocase; http_uri; content:"/securedclean/wells-fargo/wells-fargo/2zjzdc=/de3mjq=/we3yty=",nocase; classtype:attempted-recon; sid:200025383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bcbcoaching.com",nocase; http_uri; content:"/securedclean/wells-fargo/wells-fargo/2zjzdc=/dfkyte=/zm0mzk=",nocase; classtype:attempted-recon; sid:200025384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bcbcoaching.com",nocase; http_uri; content:"/securedclean/wells-fargo/wells-fargo/2zjzdc=/zhhzmq=/dvlnta=",nocase; classtype:attempted-recon; sid:200025385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bcbcoaching.com",nocase; http_uri; content:"/securedclean/wells-fargo/wells-fargo/2zjzdc=/zhhzmq=/jaxzgm=",nocase; classtype:attempted-recon; sid:200025386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beacons.ai",nocase; http_uri; content:"/serverym",nocase; classtype:attempted-recon; sid:200025387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bikeboat.com",nocase; http_uri; content:"/wp-content/ngg/wb/index.php",nocase; classtype:attempted-recon; sid:200025388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"binancezh.sh",nocase; http_uri; content:"/?bfp",nocase; classtype:attempted-recon; sid:200025389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"binghamton-my.sharepoint.com",nocase; http_uri; content:"/:w:/g/personal/mtestan2_binghamton_edu/edp3org-ymjbpyq-3xfgf5ob4x8g4fhb0siyy3cfhyg08w?e=4%3an9hzlk&amp\;at=9",nocase; classtype:attempted-recon; sid:200025390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/correostraking",nocase; classtype:attempted-recon; sid:200025391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/fu5pr",nocase; classtype:attempted-recon; sid:200025392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/fu5q5",nocase; classtype:attempted-recon; sid:200025393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/fuafh#otahal@utia.cas.cz",nocase; classtype:attempted-recon; sid:200025394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/fuvgz",nocase; classtype:attempted-recon; sid:200025395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/portale-n26-accedi",nocase; classtype:attempted-recon; sid:200025396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly.",nocase; http_uri; content:"/3ijwsm2",nocase; classtype:attempted-recon; sid:200025397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/2q7fcpg",nocase; classtype:attempted-recon; sid:200025398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/2zejaht",nocase; classtype:attempted-recon; sid:200025399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/34hdmyt",nocase; classtype:attempted-recon; sid:200025400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/366qkes",nocase; classtype:attempted-recon; sid:200025401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/37wssuw",nocase; classtype:attempted-recon; sid:200025402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/39txfq9",nocase; classtype:attempted-recon; sid:200025403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3aoqym4",nocase; classtype:attempted-recon; sid:200025404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3ccqacg",nocase; classtype:attempted-recon; sid:200025405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3dj0r1p",nocase; classtype:attempted-recon; sid:200025406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3grdybu",nocase; classtype:attempted-recon; sid:200025407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3ib7job?l=www.bancofalabella.cl",nocase; classtype:attempted-recon; sid:200025408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3jkf6va",nocase; classtype:attempted-recon; sid:200025409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3kueruz",nocase; classtype:attempted-recon; sid:200025410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3ldovbh",nocase; classtype:attempted-recon; sid:200025411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3liysw6",nocase; classtype:attempted-recon; sid:200025412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3nodk2b",nocase; classtype:attempted-recon; sid:200025413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3pt2aum",nocase; classtype:attempted-recon; sid:200025414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3pyxhfl",nocase; classtype:attempted-recon; sid:200025415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3qplrme",nocase; classtype:attempted-recon; sid:200025416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3ubpi3a",nocase; classtype:attempted-recon; sid:200025417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3urj7gg",nocase; classtype:attempted-recon; sid:200025418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3wpb5to",nocase; classtype:attempted-recon; sid:200025419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3yntw4c",nocase; classtype:attempted-recon; sid:200025420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3yqqglu",nocase; classtype:attempted-recon; sid:200025421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/banbif-pe",nocase; classtype:attempted-recon; sid:200025422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/claim-gifts",nocase; classtype:attempted-recon; sid:200025423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/erroringreso",nocase; classtype:attempted-recon; sid:200025424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/ingresoerror-",nocase; classtype:attempted-recon; sid:200025425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/lmterbank",nocase; classtype:attempted-recon; sid:200025426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/nabupdateonline",nocase; classtype:attempted-recon; sid:200025427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/shpee_coins",nocase; classtype:attempted-recon; sid:200025428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/verifikasiakunanda--2022",nocase; classtype:attempted-recon; sid:200025429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/verifikasipemblokiran_id",nocase; classtype:attempted-recon; sid:200025430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitly.com",nocase; http_uri; content:"/3g1epw3",nocase; classtype:attempted-recon; sid:200025431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitly.com",nocase; http_uri; content:"/3jrtmmu",nocase; classtype:attempted-recon; sid:200025432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitly.com",nocase; http_uri; content:"/a/blocked?hash=3ldwr8w&url=https%3a%2f%2fsecure.oldschool.com-login.cz%2fm%3dweblogin%2floginform.ws825%2c295%2c688%2c41525479%2c2004",nocase; classtype:attempted-recon; sid:200025433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitly.com",nocase; http_uri; content:"/taxirsxcy",nocase; classtype:attempted-recon; sid:200025434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitly.com",nocase; http_uri; content:"/unemploymentassistances1",nocase; classtype:attempted-recon; sid:200025435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blackbearcccouk-my.sharepoint.com",nocase; http_uri; content:"/personal/accounts_blackbearcc_co_uk/_layouts/15/onedrive.aspx?id=%2fpersonal%2faccounts%5fblackbearcc%5fco%5fuk%2fdocuments%2fngb%20urgente%20substanti%c3%able%20update%20%5f%20voorstel%2epdf&amp\;parent=%2fpersonal%2faccounts%5fblackbearcc%5fco%5fuk%2fdocuments&amp\;originalpath=ahr0chm6ly9ibgfja2jlyxjjy2nvdwstbxkuc2hhcmvwb2ludc5jb20vomi6l2cvcgvyc29uywwvywnjb3vudhnfymxhy2tizwfyy2nfy29fdwsvrve5as01b19mukjbcutzeunhv3eznw9ccfbtmze3b2fsrnrgnhpzuenbvlfiqt9ydgltzt1tqjzyquroodjvzw",nocase; classtype:attempted-recon; sid:200025436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnbchain.world",nocase; http_uri; content:"/en/balances",nocase; classtype:attempted-recon; sid:200025437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnbchain.world",nocase; http_uri; content:"/en/trade/now-e68_bnb",nocase; classtype:attempted-recon; sid:200025438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bonomequedoencasa.blogspot.com",nocase; http_uri; content:"/?aplicar",nocase; classtype:attempted-recon; sid:200025439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boofplast.com",nocase; http_uri; content:"/.well-known/inc/user/swiss-post-invoice/chdayday/pronto/pipo23/",nocase; classtype:attempted-recon; sid:200025440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brauhausschmitzoctoberfest.com",nocase; http_uri; content:"/verify/m&t/login.php",nocase; classtype:attempted-recon; sid:200025441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksshoesoutlet.com",nocase; http_uri; content:"/login.html",nocase; classtype:attempted-recon; sid:200025442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c569257608da4dcaafbc-my.sharepoint.com",nocase; http_uri; content:"/:w:/g/personal/dkapaon_brandeis_edu/es1enxze9_xblrutnfjfpm8bbxkssfvrpe6cnirweqaapg?e=4%3afdar13&amp\;at=9",nocase; classtype:attempted-recon; sid:200025443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"carepath-recruitment.co.uk",nocase; http_uri; content:"/home/payment.php",nocase; classtype:attempted-recon; sid:200025444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cbn.li",nocase; http_uri; content:"/f/9245db2516febd1d3c13c0a90f65c615",nocase; classtype:attempted-recon; sid:200025445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cbn.li",nocase; http_uri; content:"/f/fa15a875fac963541c5da50d05c179ac",nocase; classtype:attempted-recon; sid:200025446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ch-299199919900.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200025447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chase-help-support-locked.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200025448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chase-onlinehelp.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200025449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chronopostvalidation.blogspot.com",nocase; http_uri; content:"/2021/02/blog-post_12.html",nocase; classtype:attempted-recon; sid:200025450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ci3.googleusercontent.com",nocase; http_uri; content:"/proxy/rdh-rjsrv9zzrx57iscgov74o1gka4qjdfj01qr7v8-pkjgyvn50tivt7pzqgm5kuqdmonqle3f8eq_t8f4xl6jdozabmf2lxy-888ai8hdji633rg",nocase; classtype:attempted-recon; sid:200025451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ci4.googleusercontent.com",nocase; http_uri; content:"/proxy/djc3ckf7jcnj8l0duyaqyjwffeskzbccy9spjiauj_jwrplgw0ahyaf1xozvm6n_fjn8q1-2vkhqqujjr1en3qej703lyxxujt6tto-ttwsl6hgsggp3ehcc",nocase; classtype:attempted-recon; sid:200025452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ci4.googleusercontent.com",nocase; http_uri; content:"/proxy/zjba9cvtmkfnoveyofx6gqong0kqi3s69d9o2y32fmu_gankb59tj-rb79bolx0bwbsemnonfhh2esy9olfdp-20gybztkzstfhfheqrrjuefxwiwkqws29wxm6tdobikwz-qkzfphpaldfr",nocase; classtype:attempted-recon; sid:200025453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clck.ru",nocase; http_uri; content:"/escl6%09%09%09%09%09%20%20",nocase; classtype:attempted-recon; sid:200025454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clck.ru",nocase; http_uri; content:"/gwg8w",nocase; classtype:attempted-recon; sid:200025455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clck.ru",nocase; http_uri; content:"/yzuft&post=665308711_32&cc_key",nocase; classtype:attempted-recon; sid:200025456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cleannsmart.com",nocase; http_uri; content:"/upg1/",nocase; classtype:attempted-recon; sid:200025457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"click.message.fruit.com",nocase; http_uri; content:"/?qs=6541641088c869552ced792d84ee93eabf075e23cd5eba83a7d07a40ad9cf2ce36c931984719b9df7de658999defbc87f999ec46970a0280",nocase; classtype:attempted-recon; sid:200025458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"click.pstmrk.it",nocase; http_uri; content:"/2sm/www.facebook.com%2fidmeinc%2f/nk2-ri4n/weg/x37pnvbmkp/axzhlmv4cglyyxrpb24unjbfzgf5cw",nocase; classtype:attempted-recon; sid:200025459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clickmetertracking.com",nocase; http_uri; content:"/fact-comp-h5j6k7j",nocase; classtype:attempted-recon; sid:200025460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud.bwallet.com.br",nocase; http_uri; content:"/core/ups.com/wp-activation/en/app/",nocase; classtype:attempted-recon; sid:200025461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloudflare-ipfs.com",nocase; http_uri; content:"/ipfs/bafkreidqr7tw7chuyg7pf3obkufp2hultdpoas37vnnofqes7nzkq3kqfe",nocase; classtype:attempted-recon; sid:200025462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cognitoforms.com",nocase; http_uri; content:"/agt12/outlook",nocase; classtype:attempted-recon; sid:200025463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cognitoforms.com",nocase; http_uri; content:"/automotive4/hrcompliancesection",nocase; classtype:attempted-recon; sid:200025464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cognitoforms.com",nocase; http_uri; content:"/knpdf/ussecuredpdfdownloader",nocase; classtype:attempted-recon; sid:200025465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinmarketcal.com",nocase; http_uri; content:"/en/",nocase; classtype:attempted-recon; sid:200025466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"comusoportecam-produccion.appspot.com",nocase; http_uri; content:"/#/",nocase; classtype:attempted-recon; sid:200025467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confirmsubscription.com",nocase; http_uri; content:"/h/y/b6733bec265eb698",nocase; classtype:attempted-recon; sid:200025468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connect.collab-land.li",nocase; http_uri; content:"/verify?id=xkgcuxugkkypkf4ypmyujtmyb2wggmhxhb3zxxo2jirasq5uwcjm0xf5bebfkersfbxkw0p0qvea1thjhtk2fv1rnmbmnpcgcmaindnk3gopej1ks2flhde2gpqylfwg4yo9k35ebiait92u9x2ztym0tdsrdwgmontpoos7x0tluwdsxbyijwql3yngtqaj5cqcm9vzfep0kuiecacy5sac2n8j38jybd2me2bhh3ik1v0dawmo4a3cqiowpzit&callbackurl=https://prod-sns-sub.collab.land/webhook/onboard/discord/v2&connectmessage=connecting%20wallet",nocase; classtype:attempted-recon; sid:200025469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php",nocase; classtype:attempted-recon; sid:200025470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?.rand=13inboxlight.aspx?n=1774256418",nocase; classtype:attempted-recon; sid:200025471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?.rand=13inboxlight.aspx?n=1774256418&amp\;email=jackdavis@eureliosollutions.com&amp\;fid=1&amp\;fid=4&amp\;rand=13inboxlightaspxn.1774256418",nocase; classtype:attempted-recon; sid:200025472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418",nocase; classtype:attempted-recon; sid:200025473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&amp\;",nocase; classtype:attempted-recon; sid:200025474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&amp\;amp",nocase; classtype:attempted-recon; sid:200025475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&amp\;ampopensource:observable-35835700-0d08-4c25-a188-b8312ba00a941067515",nocase; classtype:attempted-recon; sid:200025476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&amp\;fid.4.1252899642&amp\;fid=1&amp\;fav.1&amp\;rand.13inboxlight.aspxn.1774256418&amp\;fid.1252899642&amp\;fid.1&amp\;fav.1&amp\;email=&amp\;.rand=13inboxlight.aspx?n=1774256418&amp\;fid=4",nocase; classtype:attempted-recon; sid:200025477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&amp\;fid.4.1252899642&amp\;fid=4&amp\;fav.1&amp\;rand.13inboxlight.aspxn.1774256418&amp\;fid.1252899642&amp\;fid.1&amp\;email=jsmith@imaphost.com&amp\;.rand=13inboxlight.aspx?n=1774256418",nocase; classtype:attempted-recon; sid:200025478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct?email=jackdavis@eureliosollutions.com",nocase; classtype:attempted-recon; sid:200025479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativeingredient.com",nocase; http_uri; content:"/wp-includes/images/verify/update/y.html",nocase; classtype:attempted-recon; sid:200025480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditiperhabbogratissicuro100.blogspot.com",nocase; http_uri; content:"/2011/02/habbo-crediti-gratis-sicuro-100.html",nocase; classtype:attempted-recon; sid:200025481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"curtislibrary-my.sharepoint.com",nocase; http_uri; content:"/:o:/p/clord/eo0lfhtannnjiehfwx2q5o8b_lkpqdhacft8rkvqad2nqg?e=5%3aq65oiu&amp\;at=9",nocase; classtype:attempted-recon; sid:200025482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cusstomerservicee.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200025483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/bxecfy0?/help/100127716309981?ref=cr",nocase; classtype:attempted-recon; sid:200025484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/ixjed0o?/safety/1008100213352?ref=cr",nocase; classtype:attempted-recon; sid:200025485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/qxdly4h?/help/pages?ref=1",nocase; classtype:attempted-recon; sid:200025486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.us",nocase; http_uri; content:"/ebvdr",nocase; classtype:attempted-recon; sid:200025487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dadaotravel.com",nocase; http_uri; content:"/wp-admin/aws/login/amazon/signin.php",nocase; classtype:attempted-recon; sid:200025488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dadaotravel.com",nocase; http_uri; content:"/wp-admin/aws/login/amazon/signin.php?country=en-us&amp\;lang=en",nocase; classtype:attempted-recon; sid:200025489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dadaotravel.com",nocase; http_uri; content:"/wp-admin/aws/login/amazon/signin.php?country=it-italy&amp\;lang=it",nocase; classtype:attempted-recon; sid:200025490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"danashaymarketing.com",nocase; http_uri; content:"/webmail-rd1278/index.html",nocase; classtype:attempted-recon; sid:200025491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapp.accessactivationbot.com",nocase; http_uri; content:"/?d#wallets",nocase; classtype:attempted-recon; sid:200025492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dawn-shadow-6508.on.fleek.co",nocase; http_uri; content:"/#abuse@optusnet.com.au",nocase; classtype:attempted-recon; sid:200025493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demo.mobileappformyrestaurant.co.uk",nocase; http_uri; content:"/uploads/team/zxc.php",nocase; classtype:attempted-recon; sid:200025494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"desejoourocard.com.br",nocase; http_uri; content:"/hotsite/inicio?utm_source=sendpulse&utm_medium=email&utm_campaign=2021_desejoourocard_ciclo_6_opt-in_sem_opt-in_varejo_%235om-p2_p8_p16_p9_frio&spush=ywxjyw50yxjhy2fzc2lhbmu2n0bnbwfpbc5jb20=",nocase; classtype:attempted-recon; sid:200025495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"digisigner.com",nocase; http_uri; content:"/online/showdocument?documentid=1fce937a-ba39-4053-a83a-f07711ad8efd&invitationid=82f3e840-cd11-4da4-8579-304bd7e930b0",nocase; classtype:attempted-recon; sid:200025496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dik.si",nocase; http_uri; content:"/7p8ma?confirmation",nocase; classtype:attempted-recon; sid:200025497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dik.si",nocase; http_uri; content:"/dirbn",nocase; classtype:attempted-recon; sid:200025498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dik.si",nocase; http_uri; content:"/iavat",nocase; classtype:attempted-recon; sid:200025499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dik.si",nocase; http_uri; content:"/ot6v7?confirmation",nocase; classtype:attempted-recon; sid:200025500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dik.si",nocase; http_uri; content:"/tpjda?confirmation",nocase; classtype:attempted-recon; sid:200025501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dik.si",nocase; http_uri; content:"/w9smu",nocase; classtype:attempted-recon; sid:200025502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"direct.lc.chat",nocase; http_uri; content:"/14038722/",nocase; classtype:attempted-recon; sid:200025503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"direct.lc.chat",nocase; http_uri; content:"/14211462/",nocase; classtype:attempted-recon; sid:200025504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"disq.us",nocase; http_uri; content:"/?url=https%3a%2f%2fpushrushed88.duckdns.org%2fredirect%2f&key=ulc_4epigzz16uwfb5b_yg",nocase; classtype:attempted-recon; sid:200025505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"districtchronicles.com",nocase; http_uri; content:"/paymydoctor-at-www-paymydoctor-com/",nocase; classtype:attempted-recon; sid:200025506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/document/d/e/2pacx-1vszcwxk6nifthkg32wjxfjgq9yc-jjujkbsumqeeau8uw7xkcutyp0tbgux2mvwu8iqfrxxlunajob8/pub",nocase; classtype:attempted-recon; sid:200025507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/document/d/e/2pacx-1vt_xl-m0ff8yqqhzhgseahgwejo0znh9re6w0qvgbe0qfe084hrebjjg673htphdnvbcdnq6agehncq/pub?mobilelogin",nocase; classtype:attempted-recon; sid:200025508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/document/d/e/2pacx-1vth3iya0ov7p49rk9ejozgqnueuk8fna2mky389hertlwx4mnoyhl1mlhnwbz8sxnsqtk8i5uysmq68/pub?embedded=true",nocase; classtype:attempted-recon; sid:200025509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/18tk5qmpccb5nygfkfeo9xc5qowvffgdjvy52swoyhd8/viewform?edit_requested=true",nocase; classtype:attempted-recon; sid:200025510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/1aegowsjpbld0rvgivurbyfidcqlg5v7z9i9ylo3bey4",nocase; classtype:attempted-recon; sid:200025511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/1aegowsjpbld0rvgivurbyfidcqlg5v7z9i9ylo3bey4/viewform?edit_requested=true",nocase; classtype:attempted-recon; sid:200025512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/1gs07chp1nmdlfpzzgcswjfzjtek057wtnfs8ws_jbky/viewform",nocase; classtype:attempted-recon; sid:200025513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/1htjqwgpnkonvm8dbgasjax8mkpu_pvnj0c71ttkfpn4/viewform",nocase; classtype:attempted-recon; sid:200025514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/1quv0zklyhgw_4y4pfincdtzmt6qim5qffhfuxcb4kl4/viewform?edit_requested=true",nocase; classtype:attempted-recon; sid:200025515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc-dgjx5xrdu-0vsevx2bd16zlt6rydibvfdsgrqlxld4lozw/viewform",nocase; classtype:attempted-recon; sid:200025516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc-nv7qlz6jg_y9ze5k9ds_kzo8hyelurb5j5veve1q4jkiwq/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc-xysogohjsbzmcnoded8ooar2gz1c5zxobgk8envh3jbpow/viewform",nocase; classtype:attempted-recon; sid:200025518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc0yyqlieizg0nzouznvhsjfags1h9qi5hpdw3qlgbivm501q/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc3djph4wwyrn1rpwrsni9kqna34ieq0yqne00fnlaq-55a5g/viewform",nocase; classtype:attempted-recon; sid:200025520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc4bagzjzmstbnjhy7zpy5zsx-xrn7reoouolv54luk5tihha/viewform",nocase; classtype:attempted-recon; sid:200025521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc8uc5aztlek3s6dqtk1etorhez5m2yvubyw5qmfkpisrelcq/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200025522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc_enqwhhv1jnvzy55mb4ghvjd4wcz9plnolh2eoitk7qgbra/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc_f0pxmnwzrtbck6u06fdzocmhgzvjzlc8cu7c9b456fhccq/viewform",nocase; classtype:attempted-recon; sid:200025524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscaoiohhbm7suyz9ol9o9ueunbxn6donxrfjge2cevdw_8jmw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscbpunbcb6ubfnwjo9jol26cjvjjsvpzkz_wb9exxt9c7erdq/viewform",nocase; classtype:attempted-recon; sid:200025526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscbtba5srjedev4uvqq49pt3recywqah-ar5szplndj-dxhgw/viewform",nocase; classtype:attempted-recon; sid:200025527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscc98m5fw4ifog0zeiuquxitizmisrgsdvyxvtxsppunpkwzq/viewform",nocase; classtype:attempted-recon; sid:200025528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscclmqirehqtkm3vl4u9gm2zv6xfvrddbrgke9fmsfujqbboq/viewform",nocase; classtype:attempted-recon; sid:200025529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscd8t8sjgxqrsa6dq5kjpmrpsxkvi4bl38sfdu7wa3sl32elg/viewform",nocase; classtype:attempted-recon; sid:200025530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscda1to5ru4sjeeujg3ki2bimklprvsec6u43kpvhbfyhrldw/viewform",nocase; classtype:attempted-recon; sid:200025531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscda1to5ru4sjeeujg3ki2bimklprvsec6u43kpvhbfyhrldw/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200025532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscdct8mue2qq3syjr4tnntol30jfdk8vwpco6yjh7dxnq5nyg/viewform",nocase; classtype:attempted-recon; sid:200025533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscdct8mue2qq3syjr4tnntol30jfdk8vwpco6yjh7dxnq5nyg/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200025534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsceoxsfawdsbd2r-jk2sppywnv1bchzjjcw2xkcj7oqkwqriw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscf9u8nrld-zvu6clr4jcwnw0buqrykdldtzoullbxy8kc1ta/viewform",nocase; classtype:attempted-recon; sid:200025536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscfh2njwrve6_rkxxy1yz83keoeekd4maqcnd-ivq7rkg0uca/viewform",nocase; classtype:attempted-recon; sid:200025537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscirilop6_iti0zvvrlsbk8zfaeo-f10otlhj9k5liyervk4g/viewform",nocase; classtype:attempted-recon; sid:200025538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscjsewetq_v_cbpyh9dzjwsaoldxz2zx816022wp1vej8gv1g/viewform",nocase; classtype:attempted-recon; sid:200025539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscjtat4fmstlxz3hbfkg4qyi-epfdmun7_avcqwvgscoydytw/viewform",nocase; classtype:attempted-recon; sid:200025540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscjvnhykksssaw-kycyrl6ywg_r3fdjuyqhk2mrmxcpgwfxoa/viewform",nocase; classtype:attempted-recon; sid:200025541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscmzyecgbuuccfs_5e5axn9hpruzskqmvseedm0xz1qrqb5vg/viewform",nocase; classtype:attempted-recon; sid:200025542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscn6xxq_xvtivggy_4rkibou1i27e0kpiimikafpaavki1vsq/viewform?usp=send_form&usp=embed_facebook",nocase; classtype:attempted-recon; sid:200025543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscndiqyfu0gtgwomcwsy-8nadvzgljrpdhkv6pedgh0avniag/viewform",nocase; classtype:attempted-recon; sid:200025544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscqbbsvkpxnasqgeazpzwxp1ln7qzdurt-nqn4azqa7q14euw/viewform",nocase; classtype:attempted-recon; sid:200025545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscrmsgjymaojts0bfneswvnfekiw6zya5rzyqoa1ydp5wkcrw/viewform",nocase; classtype:attempted-recon; sid:200025546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsct6bu4gf41cdldmjno5hpvgvwh398dv76jxzlrsrjftdf1og/viewform?usp=send_form%20trace%20complete",nocase; classtype:attempted-recon; sid:200025547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsctmueyv-hoo8lvwjhptfnaht4ymn8cr3tnftbfnqmjb6xpwg/viewform",nocase; classtype:attempted-recon; sid:200025548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscuttypbph1iazuis8aa6xvrlmagwglmdcrrg8g2oymskvbva/viewform",nocase; classtype:attempted-recon; sid:200025549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscvqmhqgwbubzxdynzgvlbmmziyagdiadz2eyhc-s-ro8ndfq/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscxgbsqs0_gphf4vziykyu_g5rgytw2s9fir3lyfar7kaixew/viewform",nocase; classtype:attempted-recon; sid:200025551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscxgbsqs0_gphf4vziykyu_g5rgytw2s9fir3lyfar7kaixew/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscxktatyielmhqxqqxtesa1ih5armwcrqy5r9-95cslplt5rg/viewform",nocase; classtype:attempted-recon; sid:200025553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscy0frglrf-omcz0vkzncs5vnnwg-sbnzhqxv7fhse6pfwf7w/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200025554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscywhsspi2neolntfe02hpq6jqilhxprhi_z58uj2lfqortyq/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200025555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscz4uf8dtvwhgxggkzsbbhjcgu9npgc6agxpy5o2fwpo6tv5q/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200025556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsczswa80hlvnpkqiuayjwbf8ha_rqzov0iiz18iixjatmqk9g/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200025557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd-bdmru2lv7bv1fk1mwwkxyrvf6uyx11zlly9k0j2gdse_rw/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200025558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd26pifmynauv34el3gdnx3yzwdue9bannzsfcy7bdkyfotaq/viewform",nocase; classtype:attempted-recon; sid:200025559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd2ou8uvxtpuhvfme1q0hzpsnfnwg-nfno2_niqp6fzcjobog/viewform",nocase; classtype:attempted-recon; sid:200025560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd3x6brnru3toiionptordwmc4zorxcky1ebpmeg6bb4jfuca/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd5a68ino7qnojzidjg3eemyspl_vscjc06rtn1yjqnrewj9q/viewform",nocase; classtype:attempted-recon; sid:200025562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd7jgegqudsjg7blscqgfvdftyvlno6xreg6wjuxl0hnfbwtw/viewform?vc=0&amp\;c=0&amp\;w=1&amp\;flr=0&amp\;gxids=7628",nocase; classtype:attempted-recon; sid:200025563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd8vkw5fxeroe_pxa7n5cdfpukhahbg_7k7sg0iuosh_xsyoa/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd9poeb_wmgffgg8taw4z_np0kdbo32gr35k1zxizj7lcdela/viewform",nocase; classtype:attempted-recon; sid:200025565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd_c4wpt0zzouwt5lr9p5kn5cylz3ananv1hlix6u_h36w1rg/viewform",nocase; classtype:attempted-recon; sid:200025566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsda4flfi-1_gvwqnbb1dcxz_mb5omo9t2oc-vslzfgh6avrag/viewform",nocase; classtype:attempted-recon; sid:200025567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdbgprbyowwcugqslasnoo-sbqcrgi6ppycsytvsw2_dwfeug/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdce9c1bqexlzlu9rojtuwtaatyeeshywbkmuiobrw_a-_mga/viewform",nocase; classtype:attempted-recon; sid:200025569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdce9c1bqexlzlu9rojtuwtaatyeeshywbkmuiobrw_a-_mga/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200025570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdcga7ojllxp3z9puyfumhvn7klcijhty86bmhawtv5r6wwqg/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200025571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdcznggxnwia2ct8kmxid1tdqhgerhnmixukxuj7nmq1lqsma/viewform",nocase; classtype:attempted-recon; sid:200025572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdf04avkjwvete8rj-wa3i7u6_8-orwqu-c-owvgb0nrxumga/viewform",nocase; classtype:attempted-recon; sid:200025573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdfarxg-0eurkyimsg-ukgl4mbtgvwfhe1wzbdxmb7oaosnyg/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdfyxb1kjjvkaiwbbpbgr0dfaq1xx2ehhzbxnt3adndssy1yw/viewform",nocase; classtype:attempted-recon; sid:200025575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdfyxb1kjjvkaiwbbpbgr0dfaq1xx2ehhzbxnt3adndssy1yw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdinjm_qvdbv3roybqi073rm1pujmrrs7lid7c3qk-4xwweew/viewform",nocase; classtype:attempted-recon; sid:200025577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdjmguhf2gu58xprr02lay_fc7kwixkq5zmtsn-5rgblqhbiw/viewform",nocase; classtype:attempted-recon; sid:200025578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdjmguhf2gu58xprr02lay_fc7kwixkq5zmtsn-5rgblqhbiw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdmjjljjfmjeijeyraxfm6pzupdbvoie7d_ussaqgqu2jh7zq/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200025580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdn6j3pmzbohssod769dzdjgkzhq9gt0czpk41k7ovrh41rkw/viewform",nocase; classtype:attempted-recon; sid:200025581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdnega_6c_pz9_q9ep9epm4iwqfsrxqsnaz-j9dyldimaoocg/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdplfokrnpmrpcrkjrxtvb7hv0nyzfocaudzkgzrftfbumaiw/viewform",nocase; classtype:attempted-recon; sid:200025583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdplfokrnpmrpcrkjrxtvb7hv0nyzfocaudzkgzrftfbumaiw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdqupro5hny5wbr5o5logbzdfh19mlw8vggtnzxrouoyvzkog/viewform",nocase; classtype:attempted-recon; sid:200025585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdrk4xndjat7qhzawgsc96chkgkg66dcwrujwfkgjhzkmzhqg/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200025586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdvwkczn_rxvn1522z1mcojbs40ymrctyizpyuv72_0wbypgq/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdwbz5hapgqojwjyndeeyjxamg0wnaj3kolh3fb6xf4c-fxjw/viewform",nocase; classtype:attempted-recon; sid:200025588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdwbz5hapgqojwjyndeeyjxamg0wnaj3kolh3fb6xf4c-fxjw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdxkjfhjk2jl99royttlqooscpgo3r9kauddp0idc_ih1g4ug/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200025590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdxm-rwnv41p3wdcbtetukrctoakvuoe1h_uy8jgnxy7kldza/viewform",nocase; classtype:attempted-recon; sid:200025591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdxupqc45v5krv3e0skzu03cm214ktma588b8afg1stpesclw/viewform",nocase; classtype:attempted-recon; sid:200025592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdxupqc45v5krv3e0skzu03cm214ktma588b8afg1stpesclw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdy1071rbhheyidjzo6fw5busqot5eunllw_thawo6udamfaq/viewform",nocase; classtype:attempted-recon; sid:200025594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdybqflfptobqslhflytic3g936bnojaljztk6ct1d5mjvnnw/viewform",nocase; classtype:attempted-recon; sid:200025595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdz5olqkck6id4jh4_uiuejnndrt4qwgs8wpqtdfqqtvgsqbw/viewform",nocase; classtype:attempted-recon; sid:200025596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdzrubbm3nrqdzjs6q7phutjgmn-dm8zquphjg9ge31q7bdhg/viewform",nocase; classtype:attempted-recon; sid:200025597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlse3-zgmg83lctfks0egmambwonybkscrvxix--n1azwngkphg/viewform",nocase; classtype:attempted-recon; sid:200025598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlse5htthgifmniezokiypnjjhanvkvlehsrk9esgcpoauqutiw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlse8ds15kxxdcrhfspcfrbvy6sbdhp0e4540zzmhhvzouewvka/viewform?vc=0&c=0&w=1&flr=0&usp=mail_form_link",nocase; classtype:attempted-recon; sid:200025600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlse_mo9pzgdahzdgz0wctr7lm0cqm_zwos8ljc4cqgtvnqfmfq/viewform",nocase; classtype:attempted-recon; sid:200025601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlse_pppzkv1rppkqwcnttkpvx35meb94rruunhijhuua5svvcw/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200025602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseaopmohwe4llodr6rvz9ybhvfg0zoqnsxzvzuqwblxhy17ta/viewform",nocase; classtype:attempted-recon; sid:200025603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseap64bhtbncjqllykpujyr2fa_s9yyfiylqbdnutvdu0kntw/viewform",nocase; classtype:attempted-recon; sid:200025604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsebpakzyvtprhygwe23jlsdieyoca0jtiyy-f68nqwofparww/viewform",nocase; classtype:attempted-recon; sid:200025605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsebyedalhc7exqq5fljf8x1akbwz0h8l8ojbx5nx3go7bh3sa/viewform",nocase; classtype:attempted-recon; sid:200025606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsebyedalhc7exqq5fljf8x1akbwz0h8l8ojbx5nx3go7bh3sa/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsecilc_5ka58gxqjfrpwbfwmhykkdly-lwm9yubx1l1gwzgpg/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200025608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseck8-g3um70ihw-ajfait5whcec3qdowobizswz8_-et_jkq/viewform",nocase; classtype:attempted-recon; sid:200025609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsecl3bk58g9ucirun7tsjpfkkkeryur6xaryenk613tqzqfxg/viewform",nocase; classtype:attempted-recon; sid:200025610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsedam8qavfd7nwszgyriuofus5xlgrvwcojm_8jtzpiw9ud_q/viewform",nocase; classtype:attempted-recon; sid:200025611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsedg-b07st85voaknpclg88z_zybaqffowcrxa-6eq1hemokg/viewform",nocase; classtype:attempted-recon; sid:200025612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseenhbbxtwamfmork3asua_pfejkhmxkqv8hlzwo-uznm3t1w/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200025613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseghb19gxs04xdkab1cubu6qmclhh_rpb2fwa8nwutpbwnkba/viewform",nocase; classtype:attempted-recon; sid:200025614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsegnx2irh_r_gtlspwo66pv4vkht2oobqmvjtvs4yqjj6vr7q/viewform",nocase; classtype:attempted-recon; sid:200025615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseht4cdltkad8967jjarcb5nafonbaw3dtpynth9mdk94hf-q/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsehwehncrhloyw72aebvvzvvzjrs6yz6qphpm1dvobyr8rnig/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseirld9oyigwxmec2bc-ax4yd-m-rhezlne00aminsjf0uteq/viewform",nocase; classtype:attempted-recon; sid:200025618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsejavlqdkikylynqlg6p7kyfu4qnlyy31opnfttucuhgmek4a/viewform",nocase; classtype:attempted-recon; sid:200025619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsejzzt0w_l58kpcmcq1bseqi53i0retcnl0a1-uldxvnyz-ka/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200025620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsel8uq3oplbpuz97bjyv7s-6wdghzjiaiauioimsb9buzjfuw/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200025621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsemwyrvcln1ql8uxd0dsiswveuehikz5hwalfeni7jjfaefmg/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200025622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseo-icwia4ztexz9jczqsndvpn_la5_zoz8wkg2ldu_hm_4ew/viewform",nocase; classtype:attempted-recon; sid:200025623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseo-icwia4ztexz9jczqsndvpn_la5_zoz8wkg2ldu_hm_4ew/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200025624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseoz9zpmm0c0fjksklv-p1hsrwsuybmj6bvbd_fkewzzcv_ea/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200025625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsepe4jevfm3mjc-vndxuq_9wjpc7afrjadkxvp8czawh27cqg/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200025626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseq5h3-5stw3bwnpoi6g-gfwcgej7q82incdm01dd1lf182iq/viewform",nocase; classtype:attempted-recon; sid:200025627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseqdx2wgybdxlhascsuopq1xqsmwrxjf4erl_cpmvtt96dq_g/viewform",nocase; classtype:attempted-recon; sid:200025628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseqvqnxg0qnfc_qjompqm_bjbey-oivzpldd-sybsidx1syna/viewform",nocase; classtype:attempted-recon; sid:200025629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlser-b6q--nvif2fj7nbn88dh8lj-s2yfbgjyuygwsacbhm6lw/viewform",nocase; classtype:attempted-recon; sid:200025630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlserwgqm-czpabole0qw-jg4bhicctqdjm3ex3v4vzifj5wldw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseszgantjzuxgteg0dsiizzmadcwjbjqcsri5nidod2rd2_lg/viewform",nocase; classtype:attempted-recon; sid:200025632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlset42bzecl3yrdnnffv6f7kecxpd1sy4rbh3h3govwg1k1z1w/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseumxp-wga1x873upqxmi_hx8nbbllh12zzmxia1xuqp2mgbq/viewform",nocase; classtype:attempted-recon; sid:200025634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsevpkt1byhl-oqjptw8wbecnm7-iqnax-mz8zd-mxp0fol3jg/viewform",nocase; classtype:attempted-recon; sid:200025635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsewr7-ksdpydhc1tv8tkcxrlad8zrf3q_uqt-rj9a_fmmzxya/viewform",nocase; classtype:attempted-recon; sid:200025636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsewr7-ksdpydhc1tv8tkcxrlad8zrf3q_uqt-rj9a_fmmzxya/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsezbbqgms0nnvgk6aq0xz8sa19zyd8w87c8js99mpi3go1mqg/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsezxizhvg-i28_n8fyddanndnufw9veep4kk934yekxvxdmdw/viewform",nocase; classtype:attempted-recon; sid:200025639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsf-exsf9vm0rleksdp46wa2dfca3dhphayf4tl4rktjvmgguw/viewform",nocase; classtype:attempted-recon; sid:200025640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsf0appdcwb17-g15hxqlvwdz2cngcp90uuisclz55s2volujg/viewform",nocase; classtype:attempted-recon; sid:200025641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsf32hx6ujsi_gqji38udpamxxxnhyrx8qhmqcqnteinj_0cmg/viewform",nocase; classtype:attempted-recon; sid:200025642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsf36z5diim8ke7cwmm_uobqacgk-r3w_uslnwnn60nzwqi3fg/viewform",nocase; classtype:attempted-recon; sid:200025643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsf37osr6zds7tctpiqseyyoqpqnzaeyv704aye3atqnyhd4-a/viewform",nocase; classtype:attempted-recon; sid:200025644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfacaqo8c7hsu7mr6zkbsfulv8m710ke2qna_7tyusomgmtjw/viewform",nocase; classtype:attempted-recon; sid:200025645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfacaqo8c7hsu7mr6zkbsfulv8m710ke2qna_7tyusomgmtjw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfaekglhjlubx-j0s40wtk-dntowamok2u3dl24wdxhni6cuw/viewform",nocase; classtype:attempted-recon; sid:200025647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfdy4lqz9cxxc2z-9qldm8asxoikrw5w_jb9d0iciiyy_bpbq/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200025648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfe2ymhbjhlp2njbhcnyypkh2q_svr-hjv6jakyhkrcvnrfhw/viewform",nocase; classtype:attempted-recon; sid:200025649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfeoy_w3jwkkz8psgsw4nrja9tmg2lx0x0nvtmv38k0hjzzmq/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfesajj9-epeg0p0pdzfaf3xooefbwmwsn2jne-6doh86mocg/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200025651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfetregzccisehncfk6344jq5ab3iq6ft0a6k_v156sh5j24g/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200025652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfgejlprqaiajfduzoh8gejctdxdv-kyn38ztkb3fu6poxwzw/viewform",nocase; classtype:attempted-recon; sid:200025653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfhrcintrbwx2of6w4vp1xd4fldir-qeghinej4jhsw4qzhjg/viewform",nocase; classtype:attempted-recon; sid:200025654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfjchag9rs_yczr5hheyuc70ukrtaonxwdhxso7_qhcpp04lq/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfjlibrqxxpw2arqzpzumujjray3jpd_mzn_kltz7jrbc93dq/viewform",nocase; classtype:attempted-recon; sid:200025656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfjpx-sxpejnp_q2fmfu0jy8oqoesrx9wbrqplcychw9luupa/viewform",nocase; classtype:attempted-recon; sid:200025657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfjsgjhbjke-mlmni8cfg1tacz-hdpvmy5j2br9upjr1f7nda/viewform",nocase; classtype:attempted-recon; sid:200025658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfjsgjhbjke-mlmni8cfg1tacz-hdpvmy5j2br9upjr1f7nda/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfk9hpkld9-qwaxs8b0cpslaw2-oomu6bcwpxkmp-fo8kr3ew/viewform",nocase; classtype:attempted-recon; sid:200025660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfksirdejkit-tdeiwrnkf00ygsqdsqth0hmwydiqdik10tna/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfmppmwkaythtoskrsm7wewzrcamfxbeyuc6f1ewjjmzisfwq/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200025662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfnjyzbmw-pd1byw4b4opoksx2cealounsnhg5fjc3fk1qocq/viewform",nocase; classtype:attempted-recon; sid:200025663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfnlsbejsiacubkj2geltmn7slefoweeczuagp3jfmfkijg4a/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfp1eukgsktriyraz2csynqwfwtv6ehlnbszu69dbxz9lirtq/viewform",nocase; classtype:attempted-recon; sid:200025665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfp1eukgsktriyraz2csynqwfwtv6ehlnbszu69dbxz9lirtq/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfqf7_zc-bsb7ej4d_rikrhb3bi-o15o1l1lsa-dw0nr-pztg/viewform",nocase; classtype:attempted-recon; sid:200025667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfqjyamn38kyfu1gixlitpfnnivmi4dcrwllbchwywxcnmcba/viewform",nocase; classtype:attempted-recon; sid:200025668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfrhtzc1pcighculgyjg6juret215diaac89flqhhwg0wx9aw/viewform",nocase; classtype:attempted-recon; sid:200025669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfrw9nsla2lpenbntfmz3q_bu-6vayjudjntqikzcei2rl3ya/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200025670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfrzt6zpkhgtvzqutkypqtjffxaucn3evqpf6ytbqug3t41yw/viewform?usp=pp_urlorganization",nocase; classtype:attempted-recon; sid:200025671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfsia_g4fb5yg_cu8fjuxcndbgqz1setzfedm0cw0eaonb57g/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200025672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsftriyys-rvphnbmh6v6lyimxjy3rpog8xvtb3v1agqhawiva/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200025673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfwdsuczwrih_wnciwh_qjpg1v5p-qk8zyjjoccpbhmyeygrq/viewform",nocase; classtype:attempted-recon; sid:200025674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfzhyjvw1nn6bvqhbwmd3rcrm6gukuzir5u9tmsszmcrr8nyw/viewform",nocase; classtype:attempted-recon; sid:200025675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vq5dr7ajdkfwicg5n2lbhbfo85bwvgageeqmuvllkwg5i2iuhekmsvmwotev1nnzoy8xasnxerngqew/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vq7oplr_-m2wcmmli5bewiwc-vkkblykry1ejy1vfvkm6c-yanjplkligavkr2dt8vkw6dmpyzkp_ki/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqfy0klc7lmimfug7xrvape2jdz8153ptionyg7ht7va1ggm5loptsqunpgtiwn36i9y8ggrat6f7ka/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqljiqoxuypxg7a8r5x7frbq4cqcvnb77n155fzyxweegqibwjyjnpghjky3howsxyb0pe3g2wm_xpm/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqo0xukh2wuts-r_jah5nfa3jsnxxdkgvfcafnigv47ptitu24xoqtt_fhtwbm1p6wpz5ajydo3ho9-/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqopq9v2asclxkhw1tgkr3v1no0smckg8as4x6t4cyhuszvfjkaosxhp2phofsyb8ag0f-anei4kzqb/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200025681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqqcbi03ke8ybh6i0nyvaecikxaa6gdgzvgwdaygprivb_-gkvuvkvqb6hqfld9vovgdewxfkt6n1z-/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqx_zel_kuemn6sejjmr951m_x6bzzai7iqp25hfj909xoffbtw822kfnfdpl4uarmqcjov-ztc9m0l/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqywoq-kea3q3xkdnwfqqdxg368izvbbqutcjaxpy3t8duksihqmnqm70qvpl0oox5l-ijx6srgpgrz/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200025684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vr1mdvfskxsvwpevn0kbbzdj03tkd-qianser_mo-xjpu0pllzd34jz_eodizwbjztx0qsbqtch6oyl/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200025685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vr47cjjl6r4iffpd0yquj85wazh1jdtp6xpiofpjgzwu18olbjgh1cyqtfcolgtpryqmk2irslyi-rp/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrgv40o-9hv-h-te58y7dluzlgkiq2lgps9rphybq5nrrnwau-nlsnedjuazhprry10otfrh3_iq1tp/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vriyg_oiukpuguzpg2epbnyy4qjmk1v3maunksjuumfujoeerubxylo9_hltssk-qv7jsrfqfppdcgn/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrl1ylbscadiuntrkeq5xe_bz5zwgfjgao5atkkbeidhn_aqqyspym3hagxsqckazae7pwdwtgkfkvg/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrndlzd4qdrc7kjcsjuzzmrrr2jdhcja_8bqfaromkv4gc0xzecwkk64xdd0cqcypwk3_s_2plp8wtv/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrp2k-b45tcwcadgwzkulyaqrs1f9vfjs3y19o6fs_7p34ymzwuascr7lkuijhc83-o6fmsbbvehcf2/pub#slide=id.p",nocase; classtype:attempted-recon; sid:200025691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrp2k-b45tcwcadgwzkulyaqrs1f9vfjs3y19o6fs_7p34ymzwuascr7lkuijhc83-o6fmsbbvehcf2/pub?start=false&amp\;loop=false&amp\;delayms=3000&amp\;slide=id.p",nocase; classtype:attempted-recon; sid:200025692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrpahi2ri6ovz6eun9nmdyvxyen0na9v3_qjmcq-kwctc4lqjkedcbeyf4doyfx5urafpn8mu6hcrnj/pub?start=false",nocase; classtype:attempted-recon; sid:200025693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrpahi2ri6ovz6eun9nmdyvxyen0na9v3_qjmcq-kwctc4lqjkedcbeyf4doyfx5urafpn8mu6hcrnj/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrrbkktbsjl0p2tdhjzjo2uawkvwbwipzqv2sgbcl7xpkns2l-hixlz_bwi0cstwntvcxq1a5r1lj4x/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrriatvgvtaoki3lje5es155asdvvgmqqjoosenskwwiutrtwubnfwgosjeuupxd5oda3gx6hbdaslk/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrxxwdr6rx90gjqaynsfyoxo6zyqem0t5dkhvlps37wzw_yvtv1l-9a46qzs57vfulfph8uqh32fbvb/pub?%20start=false&amp\;loop=false&amp\;delayms=3000",nocase; classtype:attempted-recon; sid:200025697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vs4t3osol5-a2tlqhpxcbnoykx-v0xpvbkex3ikocawxpr1jez_fqk0zq8ylq7w8_4du3b3z57qhj9r/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vs9iynmnt1qmlzrx07ug9wjcpumi8oop9omycxzs32_crcuz7usvufh4mzinngrsspgcofr-qq3fxot/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200025699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vscnp2olkt7sdim_7ngfmuhpbc_fvqmxsn4q50ynjpimjzdrkx0bkzoilywqpykl2zgdb_sh6pickh7/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vsfs_pk4-zigqm1bnegx_9gawv7ys2cx90o0o77ppfeimlqbtuy7wv14npitdzydmp9gnfrcjiufcyu/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vsgw9oh1ixw4dhkvxkwxlwsu7de-mla1kkntrqmjmqiy0zicd42e_8eakt3kiywvfk0vrfexpkcjlmb/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200025702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vskgwhr2flv0fouv_mac13jdyp5a-drx8tnnnd4soc852jjodbgozj44z7_9v5_0xlktsc10xy93zgm/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200025703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vslpj7pk4-axbccjqtpblesxanwetmsmefuchs2sloxncmvllwzftu83w_w_uia1mjemn717hwpcfnq/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200025704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vspnbijel3trkgiucqlxf7ozncbv8afgi8spwy1we3rmyp_degyrb8lt2euqyscu25c3ow_qsaa4qqd/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200025705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vsrlb5wlmujw62qr1paqhiyiso0jfaxxzzlpaxtg6fgxhbg1o-q8w_fxbx628pud1ljjcxuwyrav0xb/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200025706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vssxayagcehnojap_9vi4vkx2fwqtkzpgwviy2j2efosj2xfmvqmsyv1avj3eclx5wb22joceezc8t0/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vstqki4nnnyrhsn5l0tj0ec7y31bzuyy4tndmtidtdxtpbnwjjrb1nj5rjx_04hmctvvf5iu4yxhjx8/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200025708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vsx8ahrvwaowtfdbywictcemrz6z1wlqenjtp97v184yas9irqjz2-axi0yov-zb9yo2o5rwe4c50hi/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vsyjh3oqjp_mkyqdaub6tdi-r0ern7crtrrkktdqq6uzvearmeidpgrwvued9lf7jirwkvoi8s63qn2/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vszmxwf77cx9jec22hwonfd-l1fnnca3x407pvkw3_aanghjmyvustququfenxznzckxgaszizaop76/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200025711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vtejvm_urscgm4l2fhqauhj3zbgy2efdrqan3jfelqosuqbmhodxzjfc9mezdezg3lbhe95behy6now/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vtlsctrmytwlfbm8jahnsimsxwdjdk7ndptazmfi8y9togp2o8uozykkul9qp3xxeyhbco4zoeuiwbg/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vtwkjwy3_-kl8f5w9p6a1topb1ob0r15tijqhclejlxmwtsicqxiktafoxdxkehh4tlvfye7c6xs3og/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200025714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.transactional.pandadoc.net",nocase; http_uri; content:"/c/ejxnt9lowzaq_jr6jcpxnoqhdxrkjuoliccol2ptr9v0ciljcotrcsuqskvv7mh2zuejdfu-a4prxlbl22l1dknw5fpnfzcu_rjhgwekqtjlneqau5upway0l1src1eaiajqyijpdob7mlfpprymhxgltjvtj5fsk0bdrdgsmiw1fe4jlihthiuzz8wuponxscag6anwd2facqi2mxb9rjxp-fuq6lo_vdmee5sm4yg-pperbxtgorogbj6vnleuseckmmzebgavykymacmgfdpc6c9t4sdzvnawzi5vc13pd_olrcwfkvcbdq36frthtokmde1eo8hvk_l0bbkrx_uzcggtyv5d-tt-7stge9p_ojbyisrxjbqdwywur3djrtrunvxyt5s2e9d3y-2c06ufis_wugkpslplrcks_wyb8jdm",nocase; classtype:attempted-recon; sid:200025715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsend.com",nocase; http_uri; content:"/view/3a5r5a92ssx38jsi",nocase; classtype:attempted-recon; sid:200025716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsend.com",nocase; http_uri; content:"/view/7kbaanzkgswcge6a",nocase; classtype:attempted-recon; sid:200025717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doufatin.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200025718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/19zpw90jgon3j5merxi1pauvkjdmx8nfq/edit",nocase; classtype:attempted-recon; sid:200025719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1bcdyitw2vo5jp6yrbdmiy8cfrkcf4tby/view?usp=drive_web",nocase; classtype:attempted-recon; sid:200025720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1c5o9_y8_octsepwyojfarn1k-kj4d9fe",nocase; classtype:attempted-recon; sid:200025721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1fdgs5g6fqqkudcl2meym63ua3yu0o-tb/view?usp=drive_web",nocase; classtype:attempted-recon; sid:200025722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1ginbnlpvt7kpfnog9a68fqmn7k3aivui",nocase; classtype:attempted-recon; sid:200025723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1hdvx7j89h5l7yz39idgzhqji93jnkl_c/view",nocase; classtype:attempted-recon; sid:200025724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1jixb69t_nw9tmkhvfrejkfzof3d-ijet/view",nocase; classtype:attempted-recon; sid:200025725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1qf58h-1lunq1pubplwdhwd3uooj_vjxa/view",nocase; classtype:attempted-recon; sid:200025726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1robiosanbh8doqa7yuiewn3akz4094ho/edit",nocase; classtype:attempted-recon; sid:200025727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1vcc1-wujbe-iacakickb5lk7pli9dhon/view?usp=sharing",nocase; classtype:attempted-recon; sid:200025728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"duobabiji.com",nocase; http_uri; content:"/wp-content/aruba.it/aruba.webmail/arubaredirecti.php",nocase; classtype:attempted-recon; sid:200025729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"duratechindia.in",nocase; http_uri; content:"/t/m&t.com/home/login",nocase; classtype:attempted-recon; sid:200025730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dyuvstyfawecteraw.blogspot.com",nocase; http_uri; content:"/?ref=agfuc2pvzxjnc0bnbxguzgu",nocase; classtype:attempted-recon; sid:200025731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"east.exch082.serverdata.net",nocase; http_uri; content:"/owa/auth/logon.aspx?replacecurrent=1&amp\;url=https%3a%2f%2feast.exch082.serverdata.net%2fowa",nocase; classtype:attempted-recon; sid:200025732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eeverywhere-my.sharepoint.com",nocase; http_uri; content:"/personal/marco_eeverywhere_com/_layouts/15/onedrive.aspx?id=/personal/marco_eeverywhere_com/documents/documents&amp\;originalpath=ahr0chm6ly9lzxzlcnl3agvyzs1tes5zagfyzxbvaw50lmnvbs86zjovcc9tyxjjby9fcwhvbeq1x3hltknorzbdmdvvmgjvvujoy1z3b25futjvejhtlwxqrg9svwvrp3j0aw1lpvduaunytfu4mlvn",nocase; classtype:attempted-recon; sid:200025733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"efax25042022-webapps1-1311433986.cos.ap-chengdu.myqcloud.com",nocase; http_uri; content:"/doc.html#test@test.com",nocase; classtype:attempted-recon; sid:200025734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eki-nett.comco4.top",nocase; http_uri; content:"/dist/#/",nocase; classtype:attempted-recon; sid:200025735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eleoelswka.blogspot.com",nocase; http_uri; content:"/?m&#61\;0",nocase; classtype:attempted-recon; sid:200025736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elite-ladies-here.life",nocase; http_uri; content:"/?u=5tlkgeu&amp\;o=gqfpqzm&amp\;m=1&amp\;t=th_ppp11",nocase; classtype:attempted-recon; sid:200025737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emea01.safelinks.protection.outlook.com",nocase; http_uri; content:"/?url=https%3a%2f%2ftilbakebetalin.wpengine.com%2fsw%2flog%2f&data=04%7c01%7c%7c11af7bbcb8534b33863408d9e17cff46%7c84df9e7fe9f640afb435aaaaaaaaaaaa%7c1%7c0%7c637788749239190942%7cunknown%7ctwfpbgzsb3d8eyjwijoimc4wljawmdailcjqijoiv2lumziilcjbtii6ik1hawwilcjxvci6mn0%3d%7c3000&sdata=wyye%2fyjymouztvtdzw%2bfpfpyzj4nrvzhvloufqhq128%3d&reserved=0",nocase; classtype:attempted-recon; sid:200025738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eneeeetsowww.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200025739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ersfilter-my.sharepoint.com",nocase; http_uri; content:"/:x:/r/personal/nradonich_ersfilter_com/_layouts/15/wopiframe.aspx?guestaccesstoken=t6t%2fhn1dkbyhlyx%2beimbazufa43rrgz6%2faaaewnocdi%3d&docid=1_18168db23429e45f29fdf2e7be120efc4&wdformid=%7bb9970f62%2d44c3%2d4d09%2d9929%2d6e1eb652da57%7d&action=formsubmit",nocase; classtype:attempted-recon; sid:200025740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ersfilter-my.sharepoint.com",nocase; http_uri; content:"/personal/nradonich_ersfilter_com/_layouts/15/wopiframe.aspx?guestaccesstoken=6ywmlbqi9%20sjfgzhadhvte2gyowjf83iqbjrjehik4s=&amp\;docid=1_135f7008dfbfa44e6b09dab0eb165b997&amp\;wdformid={e037f2d9-5daa-4916-ba03-eb11d0aa6dea}&amp\;action=formsubmit",nocase; classtype:attempted-recon; sid:200025741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ersfilter-my.sharepoint.com",nocase; http_uri; content:"/personal/nradonich_ersfilter_com/_layouts/15/wopiframe.aspx?guestaccesstoken=6ywmlbqi9%2bsjfgzhadhvte2gyowjf83iqbjrjehik4s%3d&docid=1_135f7008dfbfa44e6b09dab0eb165b997&wdformid=%7be037f2d9%2d5daa%2d4916%2dba03%2deb11d0aa6dea%7d&action=formsubmit",nocase; classtype:attempted-recon; sid:200025742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esa.www.wamodshost.com",nocase; http_uri; content:"/v1/app/gbwa/image/transformer/4573be1d04074ebfab8fbb16f21a65de",nocase; classtype:attempted-recon; sid:200025743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esnafbenim.com",nocase; http_uri; content:"/wp-includes/2022/-/load/103eed12eeb30a92a3d8f5b3d07cad4a/execution.html?validation=e1s1",nocase; classtype:attempted-recon; sid:200025744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esnafbenim.com",nocase; http_uri; content:"/wp-includes/2022/-/load/2fb8b0994e6db65ef9b701f0ff58641a/execution.html?validation=e1s1",nocase; classtype:attempted-recon; sid:200025745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esnafbenim.com",nocase; http_uri; content:"/wp-includes/2022/-/load/51e40a0d5ed8d48b6e96d0ec40caaa12/execution.html?validation=e1s1",nocase; classtype:attempted-recon; sid:200025746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esnafbenim.com",nocase; http_uri; content:"/wp-includes/2022/-/load/67efab278e251f8e90afffe6927020fd/execution.html?validation=e1s1",nocase; classtype:attempted-recon; sid:200025747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esnafbenim.com",nocase; http_uri; content:"/wp-includes/2022/-/load/c09fe2de150db59dc6bec1be00a5e0a6/execution.html?validation=e1s1",nocase; classtype:attempted-recon; sid:200025748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esnafbenim.com",nocase; http_uri; content:"/wp-includes/2022/-/load/fbd44bd75fb6aa83e896a0dd47f3eca7/execution.html?validation=e1s1",nocase; classtype:attempted-recon; sid:200025749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eu2.contabostorage.com",nocase; http_uri; content:"/17369aa91d5549c192b0f736d5822403:rr-frontpage/index.html",nocase; classtype:attempted-recon; sid:200025750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evenium-site.com",nocase; http_uri; content:"/site/anlagekompass-ausblick-q3\;jsessionid=hmubiszwgs0ng8cjozmjq2mp.gl3",nocase; classtype:attempted-recon; sid:200025751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eventlink.to",nocase; http_uri; content:"/hpcb",nocase; classtype:attempted-recon; sid:200025752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evernote.com",nocase; http_uri; content:"/shard/s339/client/snv?noteguid=f48e12fd-48da-e57f-8e76-cdf6e4054e1d&amp\;notekey=02a9fa6bd051dc6b4581ee3b617b3f88&amp\;sn=https://www.evernote.com/shard/s339/sh/f48e12fd-48da-e57f-8e76-cdf6e4054e1d/02a9fa6bd051dc6b4581ee3b617b3f88&amp\;title=optus%20webmail",nocase; classtype:attempted-recon; sid:200025753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evernote.com",nocase; http_uri; content:"/shard/s446/client/snv?noteguid=4dc119ab-57d6-b8e0-4fcb-c11c0a637b94&notekey=9ddb3753cb700b0c86a78176be71f4f5&sn=https%3a%2f%2fwww.evernote.com%2fshard%2fs446%2fsh%2f4dc119ab-57d6-b8e0-4fcb-c11c0a637b94%2f9ddb3753cb700b0c86a78176be71f4f5&title=you%2bhave%2breceived%2ban%2binvoice.",nocase; classtype:attempted-recon; sid:200025754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evernote.com",nocase; http_uri; content:"/shard/s446/sh/4dc119ab-57d6-b8e0-4fcb-c11c0a637b94/9ddb3753cb700b0c86a78176be71f4f5",nocase; classtype:attempted-recon; sid:200025755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"excelelectrical0-my.sharepoint.com",nocase; http_uri; content:"/personal/tim_hansen_excelelectrical_com/_layouts/15/onedrive.aspx?id=/personal/tim_hansen_excelelectrical_com/documents/open%20to%20view%20shared%20document%20in%20hitech%20sharepoint&amp\;originalpath=ahr0chm6ly9legnlbgvszwn0cmljywwwlw15lnnoyxjlcg9pbnquy29tlzpmoi9nl3blcnnvbmfsl3rpbv9oyw5zzw5fzxhjzwxlbgvjdhjpy2fsx2nvbs9fa2zoazdydndfaettvl9pwulkctdzmejlveeyr3awzwjnsdfkrgdjrfdfttznp3j0aw1lpunrvevzrwxcmlvn",nocase; classtype:attempted-recon; sid:200025756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exch.quantserve.com",nocase; http_uri; content:"/r?us_privacy=&amp\;a=p-w_ayumw3pzr2w&amp\;labels=_qc.clk,_click.adserver.rtb,_click.rand.60541&amp\;rtbip=192.184.70.137&amp\;rtbdata2=eaaaiencvf9odwdnzxrzx1e0mjfftwfuywdlzf9tzxj2awnlimofncj-jtiws_b-ohnodhrwczovl3d3dy5syxcuy29twihbt0llsefpmvdcvwi0vmdxvi1julfbztjdullinvfzuuitwjdutjfpdu3bfukaayfd3aqeoaebqahv4fyeugeawahq-aniadv5u4til9obfllxavhtz0fpaghnqs1sufktuvntqkhlaarzydroawsyaviznracclocbmc4ronaagliagdqas7hhvv4n_fmqqhgagdoagd4agckaxywlnb1yi0xmjyxotkyndq0odazodc1mamaqamasgmejmh7angd_dgd4gmpcc13x0fzdu13m1baujj36gmfcngfefryawu5mjeymfgdaiaeayoedxf1yw50y2fzdc1xyzhybajvuw&amp\;redirecturl3=https://www.cbtnuggets.com/?utm_source=quantcast&amp\;utm_medium=prospecting&amp\;utm_campaign=general_us&amp\;utm_term=testimonial&amp\;qc_campaign=cbt_nuggets_q421_managed_service&amp\;qc_adid=2078771",nocase; classtype:attempted-recon; sid:200025757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facetkt.com",nocase; http_uri; content:"/updates/wb/index.php",nocase; classtype:attempted-recon; sid:200025758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fanlink.to",nocase; http_uri; content:"/hksr",nocase; classtype:attempted-recon; sid:200025759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"feeds.feedburner.com",nocase; http_uri; content:"/investorway",nocase; classtype:attempted-recon; sid:200025760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/aspire-127b7.appspot.com/o/dnd.html?alt=media&amp\;token=58da9567-441f-4f7b-bf07-290e808e5d8d",nocase; classtype:attempted-recon; sid:200025761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/aspire-127b7.appspot.com/o/dnd.html?alt=media&amp\;token=58da9567-441f-4f7b-bf07-290e808e5d8d#hughesmichaela06@gmail.com",nocase; classtype:attempted-recon; sid:200025762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/cardilogist91983.appspot.com/o/index.html?alt=media&amp\;token=40dc7341-52e7-495f-8ba3-04f739b67ca0#@yorku.ca",nocase; classtype:attempted-recon; sid:200025763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/dr-clin-c4f68.appspot.com/o/drweb.html?alt=media&amp\;token=09293ba9-0738-41ea-9cf3-67cb43af2b88&amp\;x=famacas-cfa0appspotappspotmacas-macas-vfwefsaxsppspotcfa0ps&amp\;prox=p2000isolation@aaa.kr",nocase; classtype:attempted-recon; sid:200025764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/dr-clin-c4f68.appspot.com/o/drweb.html?alt=media&amp\;token=09293ba9-0738-41ea-9cf3-67cb43af2b88&amp\;x=famacas-cfa0appspotappspotmacas-macas-vfwefsaxsppspotcfa0ps&amp\;prox=yourname@yourcompany.com",nocase; classtype:attempted-recon; sid:200025765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/eri1508gen.appspot.com/o/%5c%5ceri1508gen%2findex2eri_obs.html?alt=media&amp\;token=763540e1-276b-42ac-8c56-3169c5cfd0ef#jamescarlos17885@gmail.com",nocase; classtype:attempted-recon; sid:200025766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/eri1508gen.appspot.com/o/%5c%5ceri1508gen%2findex2eri_obs.html?alt=media&amp\;token=763540e1-276b-42ac-8c56-3169c5cfd0ef#thomasyi860@gmail.com",nocase; classtype:attempted-recon; sid:200025767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/jonfrnogomint.appspot.com/o/jonguyvupvipshi.html?alt=media&token=2528c54b-142c-4e25-b0a9-03affa618055",nocase; classtype:attempted-recon; sid:200025768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/nnnnzzmbcmmm.appspot.com/o/index.html?alt=media&amp\;token=ff8efd0e-8cdb-4767-998b-f421eee08f97",nocase; classtype:attempted-recon; sid:200025769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/okorocha-9d683.appspot.com/o/indexxevol.html?alt=media&amp\;token=f9ee1486-b8df-4f55-8b9c-466fcdcf99a9#@yorku.ca",nocase; classtype:attempted-recon; sid:200025770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/outlook-4c0f2.appspot.com/o/books%2fwebmail.htm?alt=media&amp\;token=216401d2-aba7-42f4-8fd5-9b672cade830#abuse@optusnet.com.au",nocase; classtype:attempted-recon; sid:200025771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/outlook-4c0f2.appspot.com/o/books%2fwebmail.htm?alt=media&amp\;token=216401d2-aba7-42f4-8fd5-9b672cade830#tiekimas@tidlo.lt",nocase; classtype:attempted-recon; sid:200025772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/pass-up-date-now.appspot.com/o/update-update-update%2findex.html?alt=media&amp\;token=d3144df5-bf15-4058-a0dc-9610b1a9193c#email=info@domain.tld",nocase; classtype:attempted-recon; sid:200025773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/preserving019029.appspot.com/o/index.html?alt=media&amp\;token=caa885e7-5275-4bde-bc3d-a3eb2c95dfee#r@yorku.ca",nocase; classtype:attempted-recon; sid:200025774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/rei-rezuio-rexire-565.appspot.com/o/%40%40%40indexv-vb-vau-ry-8%252fbv-yu-er-8f%25252525%2525252f%25252525%2525252f%25252525%2525252f%25252525%2525252f%25252525%20-%20copy.html?alt=media&amp\;token=da92acdd-870d-4049-b9ac-f0d373777f06#info@legalshield.com",nocase; classtype:attempted-recon; sid:200025775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/rned-a824v.appspot.com/o/gen%252findex2oli.html?alt=media&amp\;token=828c2259-c86f-442e-91a0-8d43a1fe7d8b#abuse@optusnet.com.au",nocase; classtype:attempted-recon; sid:200025776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/scnzmaccsscnncttw.appspot.com/o/index.html?alt=media&amp\;token=fe08a148-55d4-4bb8-8d3a-53479440818f",nocase; classtype:attempted-recon; sid:200025777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/tei-neriou-reuix-678.appspot.com/o/%40%40%40indexv-vb-veu-ry-8%25433%2569.html?alt=media&amp\;token=6b0a9c43-8711-491b-9f40-50ad280ffb32#ggradnigo@prepaidlegal.com",nocase; classtype:attempted-recon; sid:200025778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/update-d2e45.appspot.com/o/update%2fupdate%2findex.html?alt=media&amp\;token=ca2d4bde-8124-4812-9c7a-1ff88eb47549#@yorku.ca",nocase; classtype:attempted-recon; sid:200025779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firstfederation-my.sharepoint.com",nocase; http_uri; content:"/:o:/g/personal/lewis_webb_firstfederation_org_uk/eid78dus_cfjrrv2swyzp-ob1udpvku1sjneglgmz_0zwa?e=dcj1hk",nocase; classtype:attempted-recon; sid:200025780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flow.page",nocase; http_uri; content:"/dike",nocase; classtype:attempted-recon; sid:200025781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/13c1ofsbi?fc=0",nocase; classtype:attempted-recon; sid:200025782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/13wrz1ibd?fc=0",nocase; classtype:attempted-recon; sid:200025783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/1s6hcovwa?fc=0",nocase; classtype:attempted-recon; sid:200025784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/1s6jiqmub?fc=0",nocase; classtype:attempted-recon; sid:200025785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/1sbjwytzo?fc=0",nocase; classtype:attempted-recon; sid:200025786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/1scqelfiy?fc=0",nocase; classtype:attempted-recon; sid:200025787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/1shwmjpay?fc=0",nocase; classtype:attempted-recon; sid:200025788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/jsoo0zbqr?fc=0",nocase; classtype:attempted-recon; sid:200025789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/dike",nocase; classtype:attempted-recon; sid:200025790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/dixatt",nocase; classtype:attempted-recon; sid:200025791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/ejo29",nocase; classtype:attempted-recon; sid:200025792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/hip",nocase; classtype:attempted-recon; sid:200025793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/j50",nocase; classtype:attempted-recon; sid:200025794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/xpsatt",nocase; classtype:attempted-recon; sid:200025795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form.jotform.com",nocase; http_uri; content:"/221027503251138",nocase; classtype:attempted-recon; sid:200025796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form.jotform.com",nocase; http_uri; content:"/221186654354155",nocase; classtype:attempted-recon; sid:200025797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form.jotform.com",nocase; http_uri; content:"/221295519236559",nocase; classtype:attempted-recon; sid:200025798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/1mqqu8exzgpptqpl8",nocase; classtype:attempted-recon; sid:200025799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/5wjuv4glrx78xun4a",nocase; classtype:attempted-recon; sid:200025800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/8epxhwdapiab7mfw7",nocase; classtype:attempted-recon; sid:200025801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/8vb7wfyzcoeb6vvj8",nocase; classtype:attempted-recon; sid:200025802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/9bwawhpz5vi7ilpe6",nocase; classtype:attempted-recon; sid:200025803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/akohiguxjs9wlpu28?sllqm",nocase; classtype:attempted-recon; sid:200025804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/b7lqaal42juffiw1a",nocase; classtype:attempted-recon; sid:200025805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/bfz2l7i3wvrp5heb9",nocase; classtype:attempted-recon; sid:200025806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/cfqg5uz57ehywkhp7",nocase; classtype:attempted-recon; sid:200025807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/cqzwfmqvrsnm7wrq9",nocase; classtype:attempted-recon; sid:200025808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/ejefrdpmyoad4gm58",nocase; classtype:attempted-recon; sid:200025809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/eozlrnnf7jh84xdp8",nocase; classtype:attempted-recon; sid:200025810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/fc47eidpg6e64gkt5",nocase; classtype:attempted-recon; sid:200025811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/fzlons3fgnjdqdd19?omgbfzrazhlppbtx",nocase; classtype:attempted-recon; sid:200025812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/goerpntl5tfeumdz6",nocase; classtype:attempted-recon; sid:200025813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/iai7pzm4pxyb145i9",nocase; classtype:attempted-recon; sid:200025814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/jnkkauxwwbfhtuqz9?hkgotygikyoujp",nocase; classtype:attempted-recon; sid:200025815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/jzxtb9auexgjcewfa",nocase; classtype:attempted-recon; sid:200025816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/kehch96avaku7oey7?akowgmooutpwa",nocase; classtype:attempted-recon; sid:200025817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/mwctig62j4y5mgm3a",nocase; classtype:attempted-recon; sid:200025818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/nokye42b5qkubgnt9",nocase; classtype:attempted-recon; sid:200025819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/puadbxscibgw5ma79?xfccuwmmhgwrwztd",nocase; classtype:attempted-recon; sid:200025820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/qxxe9xuu3h1lgpyc9",nocase; classtype:attempted-recon; sid:200025821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/rwpcmhm8vtfa7f4m8",nocase; classtype:attempted-recon; sid:200025822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/sj21ehdebhkcpvfv6",nocase; classtype:attempted-recon; sid:200025823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/smufgmyhduckbq6ka?fjxhgyroek",nocase; classtype:attempted-recon; sid:200025824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/uqzzznxv4cfhu3yr9",nocase; classtype:attempted-recon; sid:200025825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/v5xtnywt5s6zvpp27",nocase; classtype:attempted-recon; sid:200025826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/w6uh9p66tdq6l1m66",nocase; classtype:attempted-recon; sid:200025827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/x3aasffazsrl8pcr9",nocase; classtype:attempted-recon; sid:200025828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/xxjqmu6luzkpnalg6",nocase; classtype:attempted-recon; sid:200025829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.monday.com",nocase; http_uri; content:"/forms/5ed641e5cabd481304386f35b9120276/",nocase; classtype:attempted-recon; sid:200025830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.monday.com",nocase; http_uri; content:"/forms/5ed641e5cabd481304386f35b9120276?r=use1",nocase; classtype:attempted-recon; sid:200025831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.monday.com",nocase; http_uri; content:"/forms/deef05667ad4b4a16abdf4cb6da54137",nocase; classtype:attempted-recon; sid:200025832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.office.com",nocase; http_uri; content:"/pages/responsepage.aspx?id=95vlqxxdseiozn16dgibdsdprn5ritrknkwe8o-kcqduntbduvdwsutpqzzcmk85mfdrsjk1u0pats4u",nocase; classtype:attempted-recon; sid:200025833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.office.com",nocase; http_uri; content:"/pages/responsepage.aspx?id=dqsikwdsw0yxejajblztrqaaaaaaaaaaaao__tdasqlurfrqmjzxneyxn0g3vexutfvzq0mztu9fms4u",nocase; classtype:attempted-recon; sid:200025834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.office.com",nocase; http_uri; content:"/pages/responsepage.aspx?id=dqsikwdsw0yxejajblztrqaaaaaaaaaaaao__thg5xvuodnbwtvytzhwwdnctknvovo4tldctexmvi4u",nocase; classtype:attempted-recon; sid:200025835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.office.com",nocase; http_uri; content:"/pages/responsepage.aspx?id=jrbxvx3x9keewcq72hm6fnkqekonandcsjd9av060h5urepumvvgmks2te41rfewmlletulvufnuqy4u",nocase; classtype:attempted-recon; sid:200025836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.office.com",nocase; http_uri; content:"/r/ne89gvwrye",nocase; classtype:attempted-recon; sid:200025837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.zoho.com",nocase; http_uri; content:"/247michaelbryan/form/signinyourbtaccountcorrectly1",nocase; classtype:attempted-recon; sid:200025838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.zoho.com",nocase; http_uri; content:"/pattles066/form/signinyourbtaccountcorrectly",nocase; classtype:attempted-recon; sid:200025839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.zoho.com",nocase; http_uri; content:"/traskray168/form/signinyourbtaccountcorrectly1",nocase; classtype:attempted-recon; sid:200025840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.zoho.eu",nocase; http_uri; content:"/armandb622/form/signinyourbtaccountcorrectly",nocase; classtype:attempted-recon; sid:200025841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.zoho.eu",nocase; http_uri; content:"/mucmddc993/form/signinyourbtaccountcorrectly",nocase; classtype:attempted-recon; sid:200025842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fra1.digitaloceanspaces.com",nocase; http_uri; content:"/pob9485/bachdev.htm",nocase; classtype:attempted-recon; sid:200025843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gaiff.am",nocase; http_uri; content:"/uploaded-files/110/-/d2ea863febf264a864df3e2a91a4ac05/",nocase; classtype:attempted-recon; sid:200025844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"generator.discordnitrogift.com",nocase; http_uri; content:"/php/newdocs/",nocase; classtype:attempted-recon; sid:200025845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gift-1212.blogspot.com",nocase; http_uri; content:"/2022/01/daily-rm8888-shopee-1_23.html?m=1",nocase; classtype:attempted-recon; sid:200025846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.docusign.com",nocase; http_uri; content:"/o/free/?elqcampaignid=9288/",nocase; classtype:attempted-recon; sid:200025847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.skimresources.com",nocase; http_uri; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&amp\;test=off&amp\;id=355x561&amp\;url=https://www.paypal.com/shopping/&amp\;xguid=01fez46yyrvh6f0bbehn8h419h&amp\;persistence=1&amp\;checksum=069f46345ac935567ad562a3d64a332066064c97f8feae803d555f9cc820c561",nocase; classtype:attempted-recon; sid:200025848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.skimresources.com",nocase; http_uri; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&amp\;test=off&amp\;id=355x561&amp\;url=https://www.paypal.com/shopping/&amp\;xguid=01fezncfbjbj86yneatjn0qvt4&amp\;persistence=1&amp\;checksum=8142350e161acc6cb246be1d05d596973a1d3ac50af1f3594ee9ea462c87a4ef",nocase; classtype:attempted-recon; sid:200025849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.skimresources.com",nocase; http_uri; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&amp\;test=off&amp\;id=355x561&amp\;url=https://www.paypal.com/shopping/&amp\;xguid=01ff06m6n2q43m6zcaqrh8xpm2&amp\;persistence=1&amp\;checksum=26e140f8abae23dd0c8dd547390a4deb9fc54b1acf3539d8aa44fb19e04902ef",nocase; classtype:attempted-recon; sid:200025850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.skimresources.com",nocase; http_uri; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&amp\;test=off&amp\;id=355x561&amp\;url=https://www.paypal.com/shopping/&amp\;xguid=01ff0qxy635yfpkrdaxav47j5k&amp\;persistence=1&amp\;checksum=cb2e0f7328d6ffea0e15a24046095a0bb98d27d4488e822bea4b181763f2eb0b",nocase; classtype:attempted-recon; sid:200025851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"goo.su",nocase; http_uri; content:"/aksf",nocase; classtype:attempted-recon; sid:200025852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.ch",nocase; http_uri; content:"/url?q=https://spk-kunden-manager.com/rcjju7exxu#1lwkr92k20x&sa=d&sntz=1&usg=aovvaw1sjseir4b0q4l8sbg3z3us",nocase; classtype:attempted-recon; sid:200025853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/aclk?sa=l&ai=dchcsewiqqlgp7ej4ahvyndukhuerdmeyababggj3cw&sig=aod64_2uq-uhplla9wmxiwdyzepdcwv-2q&q&adurl&ved=2ahukewisxqip7ej4ahvbg_0hhu8rc3yq0qx6bageeae",nocase; classtype:attempted-recon; sid:200025854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/aclk?sa=l&ai=dchcsewjroskd-oj4ahupj2gjhzsgcbwyabaaggj3zg&sig=aod64_2ajjdl31az8tpxqxigajjnzqesgg&q&adurl&ved=2ahukewiho7md-oj4ahw3qvedhytpa1uq0qx6bagdeae",nocase; classtype:attempted-recon; sid:200025855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?hl=en&amp\;q=https://quarantine29042022app-1311615844.cos.ap-chengdu.myqcloud.com/aaqkagm3ztm2odcyltawzgmtndk3ns05zjuxltixzmyyyznkntexmgaqadpitonhie1hjl70qeb7vdi-quarantine02719message283/quarantine.html%23pimo@apms-ltd.com&amp\;source=gmail&amp\;ust=1654842023923000&amp\;usg=aovvaw3tlbzf2sxh2-mtjs7iurao",nocase; classtype:attempted-recon; sid:200025856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?mo=78986685794&q=https://c1r.at/h49xmdcp&zp=5095739289&kf=59242331&sa=d&usg=afqjcnf_3jyqkupfmf1gle_0jmhtak3s0w",nocase; classtype:attempted-recon; sid:200025857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=http%3a%2f%2fbit.do%2ffr6ci&sa=d&sntz=1&usg=afqjcne7joz-iz-adrzkrxcihj8t9fs9qw",nocase; classtype:attempted-recon; sid:200025858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=http%3a%2f%2fbit.do%2ffsgjq&amp\;sa=d&amp\;sntz=1&amp\;usg=afqjcngvqc30z-4hiaizv03gpwblwu3vnw",nocase; classtype:attempted-recon; sid:200025859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=http%3a%2f%2fcanarytokens.com%2farticles%2fterms%2fimages%2f6273376tgy8lrrnek9ai08a01%2fredirect.html&amp\;sa=d&amp\;sntz=1&amp\;usg=aovvaw20yd4y6h3k2ostqzlu8pmd",nocase; classtype:attempted-recon; sid:200025860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=http://nouvelles-hybrides.fr/wp-admin/general/hhhheng/hhhheng/hhhhh.php?email%3d%5b%5b-email-%5d%5d&amp\;source=gmail&amp\;ust=1648980902684000&amp\;usg=aovvaw3lj6xdrkr7te65my0ifv8q",nocase; classtype:attempted-recon; sid:200025861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https%3a%2f%2f51.fi%2fai6n&amp\;sa=d&amp\;sntz=1&amp\;usg=aovvaw3ztrphk75w64vrj-rkdbza",nocase; classtype:attempted-recon; sid:200025862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https%3a%2f%2fpo9cz.weebly.com&amp\;sa=d&amp\;sntz=1&amp\;usg=afqjcnec0vbdyqyotdsbz7gijk588avcwg",nocase; classtype:attempted-recon; sid:200025863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https%3a%2f%2ftestwordpress.top%2fwp-content%2facaynumpang.html&sa=d&sntz=1&usg=afqjcneq22nczpte3zh2zdvetbj9kx5z1g",nocase; classtype:attempted-recon; sid:200025864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https%3a%2f%2fvip.91234567.cn%2fwp-includes%2firsapi1.html&sa=d&sntz=1&usg=afqjcnfo-ujbo-tnv5d6why8olvgunjxjq",nocase; classtype:attempted-recon; sid:200025865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https%3a%2f%2fvk.cc%2fcbjxkb&sa=d&509=848&usg=afqjcnec4gkgoe88ifnjjrnagnlez6uneq",nocase; classtype:attempted-recon; sid:200025866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https://393512dfd8544c98be9a40f2f67df8bd.svc.dynamics.com/t/r/a7uua5shyiplufx4zj7f6u2clgtguiagoxngfoio4am?clientid%3d70000%23%5bemail%5d%2b00-70000&amp\;source=gmail&amp\;ust=1636719774661000&amp\;usg=aovvaw2fsk8htfwhsfqapvbu674n",nocase; classtype:attempted-recon; sid:200025867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https://c1r.at/fzleuule&ry=9080899&sa=d&ha=9992286639&usg=afqjcngde0oxaxjtp-semb24qndyxqpfeg&jj=95316071",nocase; classtype:attempted-recon; sid:200025868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https://c1r.at/n62bfdcp&od=3896761062&sa=d&usg=afqjcnhmj6a5ejlmnfnws314axi9thcopa&qw=69345649672&rh=90290680",nocase; classtype:attempted-recon; sid:200025869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.de",nocase; http_uri; content:"/aclk?sa=l&ai=dchcsewif_of35ej4ahwpgqyahbnfadsyabaaggj3cw&sig=aod64_1zys9ozm5uti9mbegr6nynfsyvlq&q&adurl&ved=2ahukewj9tv325ej4ahvcx_edhv7ocdyq0qx6bagdeae",nocase; classtype:attempted-recon; sid:200025870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.vg",nocase; http_uri; content:"/url?q=https://spk-kunden-manager.com/rcjju7exxu#sx0z5vskhyx&sa=d&sntz=1&usg=aovvaw3wt2smooknv0nq-tlwykit",nocase; classtype:attempted-recon; sid:200025871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"googleweblight.com",nocase; http_uri; content:"/i?u=a894ec7f.46t33454t4.pages.dev?user=masoli@legalshieldassociate.com",nocase; classtype:attempted-recon; sid:200025872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"googleweblight.com",nocase; http_uri; content:"/i?u=b4e921f0.sso-mailsrvr-4344e5teed.pages.dev?user=abuse@gmail.com",nocase; classtype:attempted-recon; sid:200025873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"googleweblight.com",nocase; http_uri; content:"/i?u=https://webmailn0s9344.myssomailsecure-srvr3.ws24.biz/index.html?submit=redacted@redacted.tld",nocase; classtype:attempted-recon; sid:200025874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gormanusa-my.sharepoint.com",nocase; http_uri; content:"/:x:/r/personal/tspencer_gormanusa_com/_layouts/15/wopiframe.aspx?guestaccesstoken=wgfwcmmssvdsofa7ljviwaj85tleclug2xbvoqwlmp0%3d&amp\;docid=1_12424441d8c29412bb868684e5cb74e47&amp\;wdformid=%7b992e319a%2dbe72%2d460b%2db6b4%2d2d3fcf789fc5%7d&amp\;action=formsubmit",nocase; classtype:attempted-recon; sid:200025875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/vvzrf",nocase; classtype:attempted-recon; sid:200025876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hangovertest1.blogspot.com",nocase; http_uri; content:"/2021/12/window.html",nocase; classtype:attempted-recon; sid:200025877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"higherselfdevelopment.com",nocase; http_uri; content:"/secure/id/index.php",nocase; classtype:attempted-recon; sid:200025878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"himalayanprt.com",nocase; http_uri; content:"/lbpiaccess/?start",nocase; classtype:attempted-recon; sid:200025879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hotm.art",nocase; http_uri; content:"/vpib5oq/",nocase; classtype:attempted-recon; sid:200025880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://dplux.com.ng/cgi-bin/",nocase; classtype:attempted-recon; sid:200025881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://en.wikipedia.org/wiki/microsoft_exchange_server",nocase; classtype:attempted-recon; sid:200025882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://free-url-shortener.rb.gy/",nocase; classtype:attempted-recon; sid:200025883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://ib.adnxs.com/seg?redir=https://secure.adnxs.com/seg?redir=http://owl.li/pphv30sb9tt",nocase; classtype:attempted-recon; sid:200025884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://m0-online-infov4.duckdns.org/auth.php",nocase; classtype:attempted-recon; sid:200025885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://trimurl.co/0wsx7z",nocase; classtype:attempted-recon; sid:200025886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://www.aquarelle.es/tienda/ramos-de-rosas/",nocase; classtype:attempted-recon; sid:200025887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://www.google.com/search?q=m&t+login",nocase; classtype:attempted-recon; sid:200025888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://ykm.de/f4b990c239777330",nocase; classtype:attempted-recon; sid:200025889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://yuzurihah.duckdns.org/9e9q1tj?userid=yl3czfei",nocase; classtype:attempted-recon; sid:200025890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/https://aratera.com/wp-admin/",nocase; classtype:attempted-recon; sid:200025891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/https://performancelocal.com/wp-admin/",nocase; classtype:attempted-recon; sid:200025892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li?https:",nocase; http_uri; content:"//ykm.de/f4b990c239777330",nocase; classtype:attempted-recon; sid:200025893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hygocart.com",nocase; http_uri; content:"/n/#cnbpzxjjzubyahjpbnrlcm5hdglvbmfslmnvbq==",nocase; classtype:attempted-recon; sid:200025894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"i-m.mx",nocase; http_uri; content:"/ebuse/servic",nocase; classtype:attempted-recon; sid:200025895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"i-m.mx",nocase; http_uri; content:"/webaccountupdate/stockholmsuniversitet/",nocase; classtype:attempted-recon; sid:200025896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"i.imgur.com",nocase; http_uri; content:"/nzrercn.jpg",nocase; classtype:attempted-recon; sid:200025897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"idola.net.id",nocase; http_uri; content:"/prostars/index.html",nocase; classtype:attempted-recon; sid:200025898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ief.tqa.mybluehost.me",nocase; http_uri; content:"/9834665191/css/tt/security/cont.php",nocase; classtype:attempted-recon; sid:200025899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifyufyujk.quip.com",nocase; http_uri; content:"/mdkea5ckpozm/click-here-to-start",nocase; classtype:attempted-recon; sid:200025900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/4t6u/bt",nocase; classtype:attempted-recon; sid:200025901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/4t6u/e",nocase; classtype:attempted-recon; sid:200025902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/btbroadband/bt_broadband",nocase; classtype:attempted-recon; sid:200025903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/btin/bt",nocase; classtype:attempted-recon; sid:200025904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/fgjjm/1-xp",nocase; classtype:attempted-recon; sid:200025905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/iuhj/kay",nocase; classtype:attempted-recon; sid:200025906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/kennymoore12/btinternet",nocase; classtype:attempted-recon; sid:200025907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/kfouo/btcommmms",nocase; classtype:attempted-recon; sid:200025908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/lasodi2/attworld",nocase; classtype:attempted-recon; sid:200025909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/lobby02/attusers",nocase; classtype:attempted-recon; sid:200025910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/lofty2/mobileatt",nocase; classtype:attempted-recon; sid:200025911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/microvalid/bt_mail",nocase; classtype:attempted-recon; sid:200025912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/microvalid/btcomms",nocase; classtype:attempted-recon; sid:200025913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/microvalid/btcommuni",nocase; classtype:attempted-recon; sid:200025914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/msw0rd/att_word",nocase; classtype:attempted-recon; sid:200025915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/msw0rd/attsusers",nocase; classtype:attempted-recon; sid:200025916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/viewer/vbid-31138d48-omsttuer",nocase; classtype:attempted-recon; sid:200025917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/viewer/vbid-fa0f29d5-fpsjmms8",nocase; classtype:attempted-recon; sid:200025918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imcreator.com",nocase; http_uri; content:"/viewer/vbid-fa0f29d5-fpsjmms8",nocase; classtype:attempted-recon; sid:200025919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imxprs.com",nocase; http_uri; content:"/free/emailupdatee/owaweb",nocase; classtype:attempted-recon; sid:200025920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imxprs.com",nocase; http_uri; content:"/free/outlookwebaccessupgrade/outlookwebaccessupgrade",nocase; classtype:attempted-recon; sid:200025921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imxprs.com",nocase; http_uri; content:"/free/webmaiil/accounttportal",nocase; classtype:attempted-recon; sid:200025922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"indd.adobe.com",nocase; http_uri; content:"/view/7c158693-cbb8-4e14-b725-137e1c21c304",nocase; classtype:attempted-recon; sid:200025923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"indd.adobe.com",nocase; http_uri; content:"/view/b3743e05-4279-4cb6-9869-dceb1d0dc694",nocase; classtype:attempted-recon; sid:200025924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"indd.adobe.com",nocase; http_uri; content:"/view/db74fc8c-bbc2-402b-8499-0135a3092679",nocase; classtype:attempted-recon; sid:200025925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"infosubmit-ent.com",nocase; http_uri; content:"/ftec/login/ses/session_index",nocase; classtype:attempted-recon; sid:200025926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"injazrest.com",nocase; http_uri; content:"/wp-includes/js/net/",nocase; classtype:attempted-recon; sid:200025927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inpusdt.com",nocase; http_uri; content:"/index/user/login.html",nocase; classtype:attempted-recon; sid:200025928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inx.lv",nocase; http_uri; content:"/9g9h",nocase; classtype:attempted-recon; sid:200025929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inx.lv",nocase; http_uri; content:"/9git",nocase; classtype:attempted-recon; sid:200025930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inx.lv",nocase; http_uri; content:"/9gkk",nocase; classtype:attempted-recon; sid:200025931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.fleek.co",nocase; http_uri; content:"/ipfs/bafkreidurg3sni5oyyppei4dkijavell3dvpgmgmnlbdcflmkbffxj7smq",nocase; classtype:attempted-recon; sid:200025932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.fleek.co",nocase; http_uri; content:"/ipfs/bafybeiebgng7rudsc7pumuk3mczfc3dmh75chcafw7untvjagi22n6thbi",nocase; classtype:attempted-recon; sid:200025933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.fleek.co",nocase; http_uri; content:"/ipfs/bafybeieva3f7armucd63rfnbkjdggoj2jinojmwpsavqr3xwcc4uhucryq?utm_source=benchmarkemail&utm_campaign=godson&utm_medium=email",nocase; classtype:attempted-recon; sid:200025934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.fleek.co",nocase; http_uri; content:"/ipfs/bafybeihm566ce2hlr65n7bdmgdh3wfj7ikw2vvnwv3gehbtyqq22xwtrqy",nocase; classtype:attempted-recon; sid:200025935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.fleek.co",nocase; http_uri; content:"/ipfs/qmbtirqa8ezbj2rhbjd7bg8ncingx4hjcurnmul6dapx5a/#",nocase; classtype:attempted-recon; sid:200025936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.fleek.co",nocase; http_uri; content:"/ipfs/qmdumuhtw4u7kj2p9835yy5xh4f1lu9q9g4zgyoeamy3ji/index0000.html#vanicekp@utia.cas.cz",nocase; classtype:attempted-recon; sid:200025937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.fleek.co",nocase; http_uri; content:"/ipfs/qmu95i1krcpmmbfpaurvbwmh8r7jertq1dfkzmymjqdwbp/index0000.html",nocase; classtype:attempted-recon; sid:200025938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.io",nocase; http_uri; content:"/ipfs/bafkreif56nwbyvqnrjza66c4pch43zsgyzgal7snlgwfkzgutegwobjxoa",nocase; classtype:attempted-recon; sid:200025939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.io",nocase; http_uri; content:"/ipfs/bafkreihowzsspp4c7h4xitaqp7x5kcjvtaouaaigbvv6eyl5czvr6zt524",nocase; classtype:attempted-recon; sid:200025940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.io",nocase; http_uri; content:"/ipfs/qmebhkt36w3jfrll2k4jevvpvsniym5nessgtvjuaqjxje?key=bf38df4466e9cb6870142585341d7c28c4be5cba&url_01=https://asserta-honeyedly-toom.s3.us-west-004.backblazeb2.com/index.html&url_02=https://climacium-opuntiales-retar.s3.eu-central-003.backblazeb2.com/index.html&url_03=https://equalled-hylodes-penmanship.s3.eu-central-003.backblazeb2.com/index.html&url_04=https://keepsaky-samiri-subcyanide.s3.eu-central-003.backblazeb2.com/index.html&url_05=https://eccyesis-euge-splatterfaced.s3.eu-central-003.backblazeb2.com/index.html&redirect=https://www.amazon.com",nocase; classtype:attempted-recon; sid:200025941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.io",nocase; http_uri; content:"/ipfs/qmnnnukaunb6faihaueevx8hoibbas3qewhiocpvbjctga",nocase; classtype:attempted-recon; sid:200025942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.io",nocase; http_uri; content:"/ipfs/qmqscgfc8v9mtqtpe5rhze4br68aqpwkk2885yodyve62m?filename=index.html#ventas@autopalacios.com",nocase; classtype:attempted-recon; sid:200025943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.io",nocase; http_uri; content:"/ipfs/qmtiasdb95cytqqeohdrjjdytv1s62lnfxhw9cdxgxuqxc?filename=index.html",nocase; classtype:attempted-recon; sid:200025944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.io",nocase; http_uri; content:"/ipfs/qmzwhvfm9nye6tmf5jlyktr4db6gypmb2xhispfe1pd3jj",nocase; classtype:attempted-recon; sid:200025945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/3klr7s?confirmation",nocase; classtype:attempted-recon; sid:200025946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/9gvx2a?confirmation",nocase; classtype:attempted-recon; sid:200025947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/9ihdtu?confirmation",nocase; classtype:attempted-recon; sid:200025948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/asti_client",nocase; classtype:attempted-recon; sid:200025949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/bper_banca",nocase; classtype:attempted-recon; sid:200025950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/brwqpr?confirmation",nocase; classtype:attempted-recon; sid:200025951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/cvemuj?confirmation",nocase; classtype:attempted-recon; sid:200025952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/d5gghj?confirmation",nocase; classtype:attempted-recon; sid:200025953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/gxnzlm?confirmation",nocase; classtype:attempted-recon; sid:200025954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/jxlxyp?confirmation",nocase; classtype:attempted-recon; sid:200025955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/koqynv?confirmation",nocase; classtype:attempted-recon; sid:200025956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/l5vh9v?confirmation",nocase; classtype:attempted-recon; sid:200025957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/meup9d?confirmation",nocase; classtype:attempted-recon; sid:200025958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/nglszn?confirmation",nocase; classtype:attempted-recon; sid:200025959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/o1l33k?checkpoint_next.html",nocase; classtype:attempted-recon; sid:200025960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/o2vi0c?confirmation",nocase; classtype:attempted-recon; sid:200025961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/pis3wp?confirmation",nocase; classtype:attempted-recon; sid:200025962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/qbxns8?confirmation",nocase; classtype:attempted-recon; sid:200025963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/rz04c1?confirmation",nocase; classtype:attempted-recon; sid:200025964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/t2oo9e?confirmation",nocase; classtype:attempted-recon; sid:200025965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/vkchox?confirmation",nocase; classtype:attempted-recon; sid:200025966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/xznrxo?confirmation",nocase; classtype:attempted-recon; sid:200025967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/yqupsl?confirmation",nocase; classtype:attempted-recon; sid:200025968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/yr2ytg?confirmation",nocase; classtype:attempted-recon; sid:200025969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/yvtj8w?confirmation",nocase; classtype:attempted-recon; sid:200025970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/zfp8ha?confirmation",nocase; classtype:attempted-recon; sid:200025971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jecompany-my.sharepoint.com",nocase; http_uri; content:"/:w:/g/personal/dhankins_jecompanies_com/ezmchome9sxbl4kht3dj7mgbxdck6dbig800tfkd1szbja?e=dafgln",nocase; classtype:attempted-recon; sid:200025972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jefigscredit.co.ke",nocase; http_uri; content:"/dost",nocase; classtype:attempted-recon; sid:200025973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jefigscredit.co.ke",nocase; http_uri; content:"/dost/",nocase; classtype:attempted-recon; sid:200025974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jivo.chat",nocase; http_uri; content:"/code-eu1.jivosite.com/widget/jqqceif7de",nocase; classtype:attempted-recon; sid:200025975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jtbtigers.com",nocase; http_uri; content:"/7euow",nocase; classtype:attempted-recon; sid:200025976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keap.app",nocase; http_uri; content:"/contact-us/2970503358622564",nocase; classtype:attempted-recon; sid:200025977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"koji.to",nocase; http_uri; content:"/bt_internet",nocase; classtype:attempted-recon; sid:200025978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"koji.to",nocase; http_uri; content:"/bt_service_alert.",nocase; classtype:attempted-recon; sid:200025979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"koji.to",nocase; http_uri; content:"/bt_teem",nocase; classtype:attempted-recon; sid:200025980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"krizia.it",nocase; http_uri; content:"/.tmb/cose//correos/?clp=327598322",nocase; classtype:attempted-recon; sid:200025981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"krizia.it",nocase; http_uri; content:"/.tmb/cose//correos/seleccione_medio_de_pago.php",nocase; classtype:attempted-recon; sid:200025982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kryptoconnect-support.com",nocase; http_uri; content:"/index.html?",nocase; classtype:attempted-recon; sid:200025983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kutt.it",nocase; http_uri; content:"/fthaqu",nocase; classtype:attempted-recon; sid:200025984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kutt.it",nocase; http_uri; content:"/l3leph",nocase; classtype:attempted-recon; sid:200025985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kutt.it",nocase; http_uri; content:"/swissssss",nocase; classtype:attempted-recon; sid:200025986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kuyhaa-me.pw",nocase; http_uri; content:"/dhtanx/office/index.php",nocase; classtype:attempted-recon; sid:200025987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.ead.me",nocase; http_uri; content:"/amazon-account-locked-id9517453",nocase; classtype:attempted-recon; sid:200025988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.ead.me",nocase; http_uri; content:"/amazon-signin-lf4nnwapv3xgyj",nocase; classtype:attempted-recon; sid:200025989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.ead.me",nocase; http_uri; content:"/bdbxhz",nocase; classtype:attempted-recon; sid:200025990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.ead.me",nocase; http_uri; content:"/bdczsh",nocase; classtype:attempted-recon; sid:200025991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://abre.ai/eduz?userid=nwwuer4j",nocase; classtype:attempted-recon; sid:200025992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://abre.ai/een1?userid=gkywgnp7",nocase; classtype:attempted-recon; sid:200025993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://abre.ai/egic?userid=urrtk9bo",nocase; classtype:attempted-recon; sid:200025994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://abre.ai/ei3z?userid=nl7mbjhz",nocase; classtype:attempted-recon; sid:200025995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://bit.ly/3mlmufl?trackingid=asgfti6f&signature=newsletter",nocase; classtype:attempted-recon; sid:200025996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://gorkha-uae.com/hrrmxpmk?dt=1",nocase; classtype:attempted-recon; sid:200025997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://s.id/12ezw?userid=g8tmk6cv",nocase; classtype:attempted-recon; sid:200025998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://s.id/12ezw?userid=iwhzddbk",nocase; classtype:attempted-recon; sid:200025999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l24.im",nocase; http_uri; content:"/a0n",nocase; classtype:attempted-recon; sid:200026000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l24.im",nocase; http_uri; content:"/idym",nocase; classtype:attempted-recon; sid:200026001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ldp.page",nocase; http_uri; content:"/627d1ee47d4cb80020d558aa",nocase; classtype:attempted-recon; sid:200026002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ldp.page",nocase; http_uri; content:"/62985118879fa500156595cf",nocase; classtype:attempted-recon; sid:200026003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lin01.bid",nocase; http_uri; content:"/sw/w_11.js",nocase; classtype:attempted-recon; sid:200026004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkfly.to",nocase; http_uri; content:"/40601p5zynl",nocase; classtype:attempted-recon; sid:200026005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/1rvqqm",nocase; classtype:attempted-recon; sid:200026006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/8nyk33",nocase; classtype:attempted-recon; sid:200026007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/9onwxq",nocase; classtype:attempted-recon; sid:200026008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/assessoriabvonline",nocase; classtype:attempted-recon; sid:200026009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/atdminhabv",nocase; classtype:attempted-recon; sid:200026010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/bvha",nocase; classtype:attempted-recon; sid:200026011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/cupommagalo_2022",nocase; classtype:attempted-recon; sid:200026012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/fguugio",nocase; classtype:attempted-recon; sid:200026013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/hdyhid",nocase; classtype:attempted-recon; sid:200026014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/hifyiu",nocase; classtype:attempted-recon; sid:200026015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/ihkl",nocase; classtype:attempted-recon; sid:200026016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/jgbjg",nocase; classtype:attempted-recon; sid:200026017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/jrpvy",nocase; classtype:attempted-recon; sid:200026018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/mssdxd",nocase; classtype:attempted-recon; sid:200026019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/nuinvest",nocase; classtype:attempted-recon; sid:200026020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/nupagamentos21",nocase; classtype:attempted-recon; sid:200026021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/pagamentos.a",nocase; classtype:attempted-recon; sid:200026022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/portalclientebv",nocase; classtype:attempted-recon; sid:200026023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/qk1m4v",nocase; classtype:attempted-recon; sid:200026024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/rubbishrubiish",nocase; classtype:attempted-recon; sid:200026025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/suportedigital2",nocase; classtype:attempted-recon; sid:200026026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/vv06p6",nocase; classtype:attempted-recon; sid:200026027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/vvolr6",nocase; classtype:attempted-recon; sid:200026028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/w1p0l6",nocase; classtype:attempted-recon; sid:200026029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/woo3x4",nocase; classtype:attempted-recon; sid:200026030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/yahuumail",nocase; classtype:attempted-recon; sid:200026031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/yhooooo",nocase; classtype:attempted-recon; sid:200026032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio:443",nocase; http_uri; content:"/cupom-americana-site",nocase; classtype:attempted-recon; sid:200026033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/accountupdate12",nocase; classtype:attempted-recon; sid:200026034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/activitlogs",nocase; classtype:attempted-recon; sid:200026035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/adamson12345",nocase; classtype:attempted-recon; sid:200026036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/admin__",nocase; classtype:attempted-recon; sid:200026037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/adminboxalert",nocase; classtype:attempted-recon; sid:200026038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/adminboxalerta",nocase; classtype:attempted-recon; sid:200026039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/alcorbeil503",nocase; classtype:attempted-recon; sid:200026040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/alertadminboxs",nocase; classtype:attempted-recon; sid:200026041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/alertadminupdate",nocase; classtype:attempted-recon; sid:200026042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/alertboxadmin",nocase; classtype:attempted-recon; sid:200026043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/alertmoreadmin",nocase; classtype:attempted-recon; sid:200026044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/aoladmin_",nocase; classtype:attempted-recon; sid:200026045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/appiesecure2021",nocase; classtype:attempted-recon; sid:200026046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/att.net12",nocase; classtype:attempted-recon; sid:200026047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/attaccntsachieve",nocase; classtype:attempted-recon; sid:200026048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/attmailuser",nocase; classtype:attempted-recon; sid:200026049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/attservice67",nocase; classtype:attempted-recon; sid:200026050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/britishtelecommunciation",nocase; classtype:attempted-recon; sid:200026051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/bt.o.world",nocase; classtype:attempted-recon; sid:200026052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/bt45y",nocase; classtype:attempted-recon; sid:200026053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/bt5644",nocase; classtype:attempted-recon; sid:200026054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/btbroadteam",nocase; classtype:attempted-recon; sid:200026055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/btbroadteam/",nocase; classtype:attempted-recon; sid:200026056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/btcreator",nocase; classtype:attempted-recon; sid:200026057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/btinternet12",nocase; classtype:attempted-recon; sid:200026058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/btinternet21",nocase; classtype:attempted-recon; sid:200026059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/btsecurelink/",nocase; classtype:attempted-recon; sid:200026060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/bttlee",nocase; classtype:attempted-recon; sid:200026061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/bupporrrt",nocase; classtype:attempted-recon; sid:200026062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/currentl",nocase; classtype:attempted-recon; sid:200026063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/dfghjkjhgdfgh",nocase; classtype:attempted-recon; sid:200026064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/dhlpackage",nocase; classtype:attempted-recon; sid:200026065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/fearnomore",nocase; classtype:attempted-recon; sid:200026066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/ggbnhb",nocase; classtype:attempted-recon; sid:200026067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/ghvfg",nocase; classtype:attempted-recon; sid:200026068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/hendersome",nocase; classtype:attempted-recon; sid:200026069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/hthto204",nocase; classtype:attempted-recon; sid:200026070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/imcreatorboard",nocase; classtype:attempted-recon; sid:200026071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/imcreatorbt",nocase; classtype:attempted-recon; sid:200026072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/jfgjg",nocase; classtype:attempted-recon; sid:200026073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/jgbjgbjh",nocase; classtype:attempted-recon; sid:200026074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/johnbrownn4811",nocase; classtype:attempted-recon; sid:200026075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/johnbulljohn",nocase; classtype:attempted-recon; sid:200026076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/mail1083",nocase; classtype:attempted-recon; sid:200026077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/makee4",nocase; classtype:attempted-recon; sid:200026078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/marhfx",nocase; classtype:attempted-recon; sid:200026079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/millie5566",nocase; classtype:attempted-recon; sid:200026080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/newaccount12",nocase; classtype:attempted-recon; sid:200026081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/oqk001?dza=21456",nocase; classtype:attempted-recon; sid:200026082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/redirtoken981?dop=991154801",nocase; classtype:attempted-recon; sid:200026083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/sbccglob",nocase; classtype:attempted-recon; sid:200026084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/secubtscjotj",nocase; classtype:attempted-recon; sid:200026085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/status/blocked?username=attservice67",nocase; classtype:attempted-recon; sid:200026086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/status/blocked?username=btsecurelink",nocase; classtype:attempted-recon; sid:200026087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/submisin",nocase; classtype:attempted-recon; sid:200026088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/supportleee",nocase; classtype:attempted-recon; sid:200026089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/updategmxmail",nocase; classtype:attempted-recon; sid:200026090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/verifyyourprotonmailemail",nocase; classtype:attempted-recon; sid:200026091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/webmaioptus",nocase; classtype:attempted-recon; sid:200026092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/xxxx5",nocase; classtype:attempted-recon; sid:200026093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/yahooatt",nocase; classtype:attempted-recon; sid:200026094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lisarobertson.com",nocase; http_uri; content:"/micr0soft0nline365ahr0chmvoicenotmtjzac5jzwxslmnvbq/noo-reply/",nocase; classtype:attempted-recon; sid:200026095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lisarobertson.com",nocase; http_uri; content:"/staging/staging/",nocase; classtype:attempted-recon; sid:200026096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lisarobertson.com",nocase; http_uri; content:"/wp-includes/certificates/schlesingergroup/noo-reply/",nocase; classtype:attempted-recon; sid:200026097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lisarobertson.com",nocase; http_uri; content:"/wp-includes/widgets/widg/",nocase; classtype:attempted-recon; sid:200026098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"livablefutureblog.com",nocase; http_uri; content:"/mk/lin/lin/",nocase; classtype:attempted-recon; sid:200026099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"livenmitac-my.sharepoint.com",nocase; http_uri; content:"/personal/hannah-daly_live_nmit_ac_nz/_layouts/15/wopiframe.aspx?guestaccesstoken=ia5uzzon3iviku4f3pxemyhhabfwkpdjirpftfear%2fk%3d&docid=1_169208e425ed84fea9fd294a6886d67e9&wdformid=%7b06255f86%2d4bf9%2d4ee8%2dbd7e%2dfef81913a79b%7d&action=formsubmit",nocase; classtype:attempted-recon; sid:200026100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"livenmitac-my.sharepoint.com",nocase; http_uri; content:"/personal/hannah-daly_live_nmit_ac_nz/_layouts/15/wopiframe.aspx?guestaccesstoken=ia5uzzon3iviku4f3pxemyhhabfwkpdjirpftfear/k=&amp\;docid=1_169208e425ed84fea9fd294a6886d67e9&amp\;wdformid={06255f86-4bf9-4ee8-bd7e-fef81913a79b}&amp\;action=formsubmit",nocase; classtype:attempted-recon; sid:200026101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/d-3hbjpx",nocase; classtype:attempted-recon; sid:200026102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/d2cagqdm",nocase; classtype:attempted-recon; sid:200026103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/d_kqpmtx",nocase; classtype:attempted-recon; sid:200026104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/db5fhxav",nocase; classtype:attempted-recon; sid:200026105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/dfxw4_sm=ojdszb15xdzzzv",nocase; classtype:attempted-recon; sid:200026106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/di6hueus",nocase; classtype:attempted-recon; sid:200026107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/di_qntwp",nocase; classtype:attempted-recon; sid:200026108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/difsmpfx",nocase; classtype:attempted-recon; sid:200026109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/dkng9_k3",nocase; classtype:attempted-recon; sid:200026110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/dn3ujtph",nocase; classtype:attempted-recon; sid:200026111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/dnnpnd4y",nocase; classtype:attempted-recon; sid:200026112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/dr4agxum",nocase; classtype:attempted-recon; sid:200026113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/drgcsgzw",nocase; classtype:attempted-recon; sid:200026114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/drsgmgjm",nocase; classtype:attempted-recon; sid:200026115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/drxkr5pj",nocase; classtype:attempted-recon; sid:200026116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/dvmqs3eb",nocase; classtype:attempted-recon; sid:200026117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/dxnhhybc",nocase; classtype:attempted-recon; sid:200026118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/e2dq2z7h",nocase; classtype:attempted-recon; sid:200026119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/e2p8spez",nocase; classtype:attempted-recon; sid:200026120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/e2stmj2s?=mtqeaywlyj1co3",nocase; classtype:attempted-recon; sid:200026121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/e3g9qxhs",nocase; classtype:attempted-recon; sid:200026122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/e55ej5xx",nocase; classtype:attempted-recon; sid:200026123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/e5gzdpqa",nocase; classtype:attempted-recon; sid:200026124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/e5kpq2fp",nocase; classtype:attempted-recon; sid:200026125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/e_idwusk",nocase; classtype:attempted-recon; sid:200026126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/earmae2d%22",nocase; classtype:attempted-recon; sid:200026127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/easrgdqg",nocase; classtype:attempted-recon; sid:200026128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ecymrzgu",nocase; classtype:attempted-recon; sid:200026129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/edvvp6ax",nocase; classtype:attempted-recon; sid:200026130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ee5yc9ca",nocase; classtype:attempted-recon; sid:200026131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/eefrfkzq?=ojiouwexpg8h5s",nocase; classtype:attempted-recon; sid:200026132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/effdee-j",nocase; classtype:attempted-recon; sid:200026133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/egbbkcqr",nocase; classtype:attempted-recon; sid:200026134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ehk85dzy",nocase; classtype:attempted-recon; sid:200026135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/emmrycxb",nocase; classtype:attempted-recon; sid:200026136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/eqe_7fzg",nocase; classtype:attempted-recon; sid:200026137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/eqexis8b?=779auzfcptp61w",nocase; classtype:attempted-recon; sid:200026138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/er86brtc",nocase; classtype:attempted-recon; sid:200026139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/esh6x-2g",nocase; classtype:attempted-recon; sid:200026140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/esjzqf_8",nocase; classtype:attempted-recon; sid:200026141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/et-dkcdj",nocase; classtype:attempted-recon; sid:200026142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/eu3tad-d",nocase; classtype:attempted-recon; sid:200026143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/eu9zpb6z",nocase; classtype:attempted-recon; sid:200026144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/euhr7uki",nocase; classtype:attempted-recon; sid:200026145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ev55_yea",nocase; classtype:attempted-recon; sid:200026146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/evbzscwd",nocase; classtype:attempted-recon; sid:200026147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/evjgv5bv?=eme9jh5wippejx",nocase; classtype:attempted-recon; sid:200026148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ew4xnymr",nocase; classtype:attempted-recon; sid:200026149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ewfyckzm",nocase; classtype:attempted-recon; sid:200026150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ews7fgtw",nocase; classtype:attempted-recon; sid:200026151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/exc7h6tz",nocase; classtype:attempted-recon; sid:200026152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ez2wd7tg",nocase; classtype:attempted-recon; sid:200026153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ezztetjp",nocase; classtype:attempted-recon; sid:200026154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/g45cgcft",nocase; classtype:attempted-recon; sid:200026155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/g4qytsvf",nocase; classtype:attempted-recon; sid:200026156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/g6y3fhkt",nocase; classtype:attempted-recon; sid:200026157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gat_yr4c",nocase; classtype:attempted-recon; sid:200026158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gbs4ecw8",nocase; classtype:attempted-recon; sid:200026159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gczqssnv",nocase; classtype:attempted-recon; sid:200026160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gepk78hu",nocase; classtype:attempted-recon; sid:200026161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gezjhddn",nocase; classtype:attempted-recon; sid:200026162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gfbpb8pc",nocase; classtype:attempted-recon; sid:200026163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gfudg_bw",nocase; classtype:attempted-recon; sid:200026164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ghktz_zc?=asrrne8hwgbpmp9",nocase; classtype:attempted-recon; sid:200026165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ghktz_zc?=jjbpe2kkugganzg",nocase; classtype:attempted-recon; sid:200026166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ghktz_zc?=yh2qhzgzcwjq4ri",nocase; classtype:attempted-recon; sid:200026167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ghqhm_2d",nocase; classtype:attempted-recon; sid:200026168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gjgskbfu",nocase; classtype:attempted-recon; sid:200026169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gm9mx7ii",nocase; classtype:attempted-recon; sid:200026170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gmhtpmas",nocase; classtype:attempted-recon; sid:200026171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gnpurze8",nocase; classtype:attempted-recon; sid:200026172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/grxqxr5n",nocase; classtype:attempted-recon; sid:200026173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gtqqwvzn",nocase; classtype:attempted-recon; sid:200026174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gw2x_btv",nocase; classtype:attempted-recon; sid:200026175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gxsukn_z?=hmawyn6k",nocase; classtype:attempted-recon; sid:200026176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gyrmxhc4",nocase; classtype:attempted-recon; sid:200026177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gysdniaz",nocase; classtype:attempted-recon; sid:200026178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-live.com-s02.net",nocase; http_uri; content:"/de/?code=1a468e385b9475ae1d0bfa645841a01f",nocase; classtype:attempted-recon; sid:200026179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login.salaryatsea.mycrewallet.com",nocase; http_uri; content:"/rccl",nocase; classtype:attempted-recon; sid:200026180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lt27.de",nocase; http_uri; content:"/dqrxai",nocase; classtype:attempted-recon; sid:200026181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lt27.de",nocase; http_uri; content:"/jal0cm",nocase; classtype:attempted-recon; sid:200026182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lt27.de",nocase; http_uri; content:"/jnrv8a",nocase; classtype:attempted-recon; sid:200026183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lt27.de",nocase; http_uri; content:"/malfqj",nocase; classtype:attempted-recon; sid:200026184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lt27.de",nocase; http_uri; content:"/qz2ci3",nocase; classtype:attempted-recon; sid:200026185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lynk.id",nocase; http_uri; content:"/claimskinn",nocase; classtype:attempted-recon; sid:200026186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.me",nocase; http_uri; content:"/stimulusbenefit9090",nocase; classtype:attempted-recon; sid:200026187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2fcannacoin.xyz/wp-includes/images/api.html",nocase; classtype:attempted-recon; sid:200026188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2fmoviefreedownloads.xyz/wp/wp-admin/api.html",nocase; classtype:attempted-recon; sid:200026189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2foasysfactory.com/wp-includes/css/api.html",nocase; classtype:attempted-recon; sid:200026190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fbodycare.co.za/wp-admin/js/api.php",nocase; classtype:attempted-recon; sid:200026191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fevhservices.co.uk/wp/wp-includes/images/api.html",nocase; classtype:attempted-recon; sid:200026192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2flesemauxderenaud.com/wp-admin/css/api.html",nocase; classtype:attempted-recon; sid:200026193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fscyrub.com/wp-admin/css/api.php",nocase; classtype:attempted-recon; sid:200026194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fshop.blacklabelmattress.com/wp-content/upgrade/api.html",nocase; classtype:attempted-recon; sid:200026195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.vk.com",nocase; http_uri; content:"/away.php?to=https://qrs.ly/9gdxb1c",nocase; classtype:attempted-recon; sid:200026196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magyarpoosta.blogspot.com",nocase; http_uri; content:"/2021/02/blog-post.html",nocase; classtype:attempted-recon; sid:200026197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mainsolutionsnet.com",nocase; http_uri; content:"/?y",nocase; classtype:attempted-recon; sid:200026198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masceanrd.macceoosaserd.dsyau.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200026199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascioosoerd.masicesccrerd.vlbitu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200026200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsosoerd.masecescrerd.mzztru.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200026201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maseecece.cseoaerrsdoeear.sieoeoscicencsecrercceesoerdas.mdgt.com.cn",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200026202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maseeseosiceosrcoercdse.mieoasocensaseocceueoccesoessccrerd.howt.co",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200026203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maseeseosiceosrcoercdse.mieoasocensaseocceueoccesoessccrerd.peut.co",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200026204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mb102.com",nocase; http_uri; content:"/lnk.asp",nocase; classtype:attempted-recon; sid:200026205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mcas-proxyweb.mcas.ms",nocase; http_uri; content:"/certificate-checker?login=false&amp\;originalurl=https%3a%2f%2fbit.ly.mcas.ms%2f3oynzgj%3fmcastsid%3d20893&amp\;mcascsrf=93b468fdf3284ff3f2c8f22a8a87cba95517d378569921d184b2090fc8102d80",nocase; classtype:attempted-recon; sid:200026206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mcas-proxyweb.mcas.ms",nocase; http_uri; content:"/certificate-checker?login=false&amp\;originalurl=https%3a%2f%2fbit.ly.mcas.ms%2f3tbqbin%3fmcastsid%3d20893&amp\;mcascsrf=0f95c59a30af1e3a152874bd1ed8389e360301a106dd1613f05a98f6033f0361",nocase; classtype:attempted-recon; sid:200026207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"megatherm-dev.in",nocase; http_uri; content:"/baba/mail.ionos.com/common/auth/email-authentication-id8478388377488299287474729299942949947927449589398/user-session/auth0f38575889948399385943/?email=redacted@abuse.ionos.com",nocase; classtype:attempted-recon; sid:200026208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"members.har.com",nocase; http_uri; content:"/sites/kellerwilliamshouston/linkout.cfm?office=http://www.hm.com&to=https://dev-fvazquejr4.pantheonsite.io/index.html#example@example.com",nocase; classtype:attempted-recon; sid:200026209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mi.jetblue.com",nocase; http_uri; content:"/p/cp/0ccc3066dc2bcd17/c?mi_u=87923176&mi_origin=&url=http://email.stickercanada.com/t?entity_type=2&entity_id=32534&email_pref_id=34785928&sent_id=1600423397&service_id=22668&redirect_url=https:/relievehotmailonly.cloudns.cl/imagineme/ionos.php",nocase; classtype:attempted-recon; sid:200026210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mmtro.com",nocase; http_uri; content:"/c?tagid=6565567-e43649793250da163478de2807c5c809&amp\;idc=77972&amp\;redir=https://loginingmocrosofttbox.pllatos.com/?e=@emba.schulich.yorku.ca&amp\;",nocase; classtype:attempted-recon; sid:200026211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/609890b8001f18095ac075fc",nocase; classtype:attempted-recon; sid:200026212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/60deff002ca34f5aa4985ab3",nocase; classtype:attempted-recon; sid:200026213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/6112452ca3f6e60d511bad0d",nocase; classtype:attempted-recon; sid:200026214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/61e82b96ed8dd6152815c487#",nocase; classtype:attempted-recon; sid:200026215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/61fbd0ed6ab665110baf7c8d",nocase; classtype:attempted-recon; sid:200026216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/6216d491976b950bb612ee29",nocase; classtype:attempted-recon; sid:200026217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/6217e24f976b950bb6148afa",nocase; classtype:attempted-recon; sid:200026218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/622ef84817a64c6cae942da3",nocase; classtype:attempted-recon; sid:200026219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/622f257117a64c6cae9476f7",nocase; classtype:attempted-recon; sid:200026220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62528753e911ef58a52499d4",nocase; classtype:attempted-recon; sid:200026221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/628e2c9dbd94a175bb6fe784",nocase; classtype:attempted-recon; sid:200026222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/6291f287bd94a175bb75e94d",nocase; classtype:attempted-recon; sid:200026223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/629b6312bd94a175bb849970",nocase; classtype:attempted-recon; sid:200026224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/629e7974bd94a175bb89ffeb",nocase; classtype:attempted-recon; sid:200026225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62a096d7bd94a175bb8dc8ec",nocase; classtype:attempted-recon; sid:200026226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62a44bd3bd94a175bb93ccfe",nocase; classtype:attempted-recon; sid:200026227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62aab8d4bd94a175bb9d8b2d",nocase; classtype:attempted-recon; sid:200026228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62ab0092bd94a175bb9df796",nocase; classtype:attempted-recon; sid:200026229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62ab0b05bd94a175bb9e08f3",nocase; classtype:attempted-recon; sid:200026230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62ac8b3b40535c37d67c13bd",nocase; classtype:attempted-recon; sid:200026231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62b21abebd94a175bba7ec1b",nocase; classtype:attempted-recon; sid:200026232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62b729dcbd94a175bbb0a072",nocase; classtype:attempted-recon; sid:200026233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62baae34bd94a175bbb57e50",nocase; classtype:attempted-recon; sid:200026234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62bafb7fbd94a175bbb5e6e7",nocase; classtype:attempted-recon; sid:200026235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62dbab88971e3e097d4f6e0f",nocase; classtype:attempted-recon; sid:200026236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/jenetwood/untitled-form-1",nocase; classtype:attempted-recon; sid:200026237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/layananpihakfacebook/resmipemblokiranfacebook",nocase; classtype:attempted-recon; sid:200026238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/rayzmania1/capitecbankdebitcheckmandate",nocase; classtype:attempted-recon; sid:200026239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.visme.co",nocase; http_uri; content:"/view/epy7xq3y-office-365",nocase; classtype:attempted-recon; sid:200026240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaioscseooeb.miyejcaoseeseb.vlbitu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200026241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaocseooeb.myjaocseeseb.uqmzwu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200026242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaoscseooeb.myejcaoseeseb.vlbitu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200026243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"n9.cl",nocase; http_uri; content:"/en/b/5j9l4",nocase; classtype:attempted-recon; sid:200026244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/2hhwdm",nocase; classtype:attempted-recon; sid:200026245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/6kxp6p",nocase; classtype:attempted-recon; sid:200026246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/hxnuzx",nocase; classtype:attempted-recon; sid:200026247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/k4jcff",nocase; classtype:attempted-recon; sid:200026248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/l4khtv",nocase; classtype:attempted-recon; sid:200026249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/pogdut",nocase; classtype:attempted-recon; sid:200026250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/q3euu4",nocase; classtype:attempted-recon; sid:200026251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/qzadbp",nocase; classtype:attempted-recon; sid:200026252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/tutp27",nocase; classtype:attempted-recon; sid:200026253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/vimyln",nocase; classtype:attempted-recon; sid:200026254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/vwzsnu",nocase; classtype:attempted-recon; sid:200026255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netorg3850966-my.sharepoint.com",nocase; http_uri; content:"/:o:/g/personal/jason_jasoncolemanhomes_com/eugtikeijyhdouwl-ipyk7qbc1efrb9kbobz6gtu0f2moq",nocase; classtype:attempted-recon; sid:200026256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netorg6600800-my.sharepoint.com",nocase; http_uri; content:"/:x:/r/personal/ginger_gingerfountain_com/_layouts/15/wopiframe.aspx?guestaccesstoken=gpys8ex7ys1urrzbfeasvlexkodtrovmmcpn%2brsnebs%3d&amp\;docid=1_1882b07b5eb5643d2bdaa63426324ef0e&amp\;wdformid=%7b9bd54af1%2dee16%2d4e07%2d8d62%2d6e9b76e47512%7d&amp\;action=formsubmit&amp\;cid=9adf3e74-8cc1-4e36-b545-c9165fcafde7",nocase; classtype:attempted-recon; sid:200026257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"objects-us-east-1.dream.io",nocase; http_uri; content:"/pinguin/staff/andrew.html?serema=21534&youbicane=appsuite&piedra=108382846",nocase; classtype:attempted-recon; sid:200026258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"objects-us-east-1.dream.io",nocase; http_uri; content:"/pinguin/staff/andrew.html?serema=21534&youbicane=appsuite&piedra=108406589",nocase; classtype:attempted-recon; sid:200026259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"objects-us-east-1.dream.io",nocase; http_uri; content:"/pinguin/staff/andrew.html?serema=21534&youbicane=appsuite&piedra=108507277",nocase; classtype:attempted-recon; sid:200026260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"objects-us-east-1.dream.io",nocase; http_uri; content:"/pinguin/staff/andrew.html?serema=21554&youbicane=appsuite&piedra=113178640",nocase; classtype:attempted-recon; sid:200026261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"objectstorage.us-ashburn-1.oraclecloud.com",nocase; http_uri; content:"/n/idbpnnvqxre0/b/sharepoin7/o/indexseradon.html",nocase; classtype:attempted-recon; sid:200026262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"objectstorage.us-phoenix-1.oraclecloud.com",nocase; http_uri; content:"/n/axvtgnl3pbw3/b/bucket-20220819-0109/o/indexs%20(8).html",nocase; classtype:attempted-recon; sid:200026263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"objectstorage.us-phoenix-1.oraclecloud.com",nocase; http_uri; content:"/n/axvtgnl3pbw3/b/bucket-20220820-0253/o/indexs%20(8).html",nocase; classtype:attempted-recon; sid:200026264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oiazeiuiazolme.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200026265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive.live.com",nocase; http_uri; content:"/download?cid=936f66742226eaf0&resid=936f66742226eaf0%21105&authkey=aitnwnmvuumu2oo",nocase; classtype:attempted-recon; sid:200026266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive.live.com",nocase; http_uri; content:"/view.aspx?resid=cd71337cfb2b3ba9!1313&amp\;ithint=onenote&amp\;wdo=2&amp\;authkey=!ajwhinbbsa8ui98",nocase; classtype:attempted-recon; sid:200026267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-helpchase.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200026268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online.visual-paradigm.com",nocase; http_uri; content:"/app/forms/view/zalxyved/a9adea36-d163-4d46-a3de-0e990d86e78e",nocase; classtype:attempted-recon; sid:200026269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinecasinospark.com",nocase; http_uri; content:"/ions/index.php?email=redacted@abuse.ionos.com",nocase; classtype:attempted-recon; sid:200026270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinehelpchase.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200026271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"padlet-uploads.storage.googleapis.com",nocase; http_uri; content:"/1682449218/156e09d0ea8e294db3474e54a2df1dc9/download.htm",nocase; classtype:attempted-recon; sid:200026272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages03.net",nocase; http_uri; content:"/ripleychile/formulario/formulario_opt_out/opt_out?spmailingid=46529866&amp\;spuserid=mtm1mjmzntkxntc5mqs2&amp\;spjobid=mjiwmti5njg1mqs2&amp\;spreportid=mjiwmti5njg1mqs2",nocase; classtype:attempted-recon; sid:200026273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagesrecureinformationactivltyclient.co.vu",nocase; http_uri; content:"/confirmid.php",nocase; classtype:attempted-recon; sid:200026274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagessecureinformationactivltyclient.co.vu",nocase; http_uri; content:"/confirmid.php",nocase; classtype:attempted-recon; sid:200026275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paozeia.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200026276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paypal-inc-userupdatenuber7925570844.blogspot.com",nocase; http_uri; content:"/2021/02/blog-post.html",nocase; classtype:attempted-recon; sid:200026277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"perspectivart.com",nocase; http_uri; content:"/orn.html",nocase; classtype:attempted-recon; sid:200026278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pichaapp.africa",nocase; http_uri; content:"/wp-admin/includes/api-irs.html",nocase; classtype:attempted-recon; sid:200026279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pocoyo.com",nocase; http_uri; content:"/juegos-ninos/habilidad",nocase; classtype:attempted-recon; sid:200026280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ppi.alphaobsdevelopment.co.in",nocase; http_uri; content:"/wp-includes/cqwmall/",nocase; classtype:attempted-recon; sid:200026281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ppi.alphaobsdevelopment.co.in",nocase; http_uri; content:"/wp-includes/cqwmall/index.php",nocase; classtype:attempted-recon; sid:200026282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ppt.cc",nocase; http_uri; content:"/fia8mx",nocase; classtype:attempted-recon; sid:200026283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ppt.cc",nocase; http_uri; content:"/fva4wx",nocase; classtype:attempted-recon; sid:200026284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ppt.cc",nocase; http_uri; content:"/fvakzx",nocase; classtype:attempted-recon; sid:200026285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ppt.cc",nocase; http_uri; content:"/fvllvx",nocase; classtype:attempted-recon; sid:200026286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preferences.convertkit-mail.com",nocase; http_uri; content:"/d0uv8808qzu0hxnpoqtl",nocase; classtype:attempted-recon; sid:200026287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"premium57.web-hosting.com:2096",nocase; http_uri; content:"/cpsess3669307974/horde/imp/dynamic.php?page=mailbox#",nocase; classtype:attempted-recon; sid:200026288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preview.mailerlite.io",nocase; http_uri; content:"/preview/104287/sites/61058225432167468/index",nocase; classtype:attempted-recon; sid:200026289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preview.mailerlite.io",nocase; http_uri; content:"/preview/110767/sites/61786017102825222/index",nocase; classtype:attempted-recon; sid:200026290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preview.mailerlite.io",nocase; http_uri; content:"/preview/123455/sites/63214900840761106/index",nocase; classtype:attempted-recon; sid:200026291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prgmd.net",nocase; http_uri; content:"/realsolution/adobe-3d6-popwindow/",nocase; classtype:attempted-recon; sid:200026292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"problemstandacc0unt.com",nocase; http_uri; content:"/?support/1021884212401?ref=cr",nocase; classtype:attempted-recon; sid:200026293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"proceedencryptions.blogspot.com",nocase; http_uri; content:"/?m=1",nocase; classtype:attempted-recon; sid:200026294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"protection.retarus.com",nocase; http_uri; content:"/v1?u=https%3a%2f%2fconnect.companyswisscard-ch.com%2feservice%2f%3fkey%3dbwlrzs5zdgvpbmvyqdrwzxrzlmno&c=11pvwl1g24&r=4ypi1jst5zgkcj3vd2wihg&k=7s1&s=zsqoc1bkurwk0wmdwuz3to1vjj60cx8due0wrexybse",nocase; classtype:attempted-recon; sid:200026295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub5.bravenet.com",nocase; http_uri; content:"/emailfwd/show.php?usernum=350311855&amp\;formid=3879",nocase; classtype:attempted-recon; sid:200026296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/2rc41txe",nocase; classtype:attempted-recon; sid:200026297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/ewqwwwsl",nocase; classtype:attempted-recon; sid:200026298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/hi1opzhz",nocase; classtype:attempted-recon; sid:200026299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/in1b4ru",nocase; classtype:attempted-recon; sid:200026300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/izircqqd",nocase; classtype:attempted-recon; sid:200026301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/ofcclfoq",nocase; classtype:attempted-recon; sid:200026302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/r6wxsyai",nocase; classtype:attempted-recon; sid:200026303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/stwj0uvm",nocase; classtype:attempted-recon; sid:200026304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/uwxh38rr",nocase; classtype:attempted-recon; sid:200026305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/ytmc2hww",nocase; classtype:attempted-recon; sid:200026306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/zv8d_zyc",nocase; classtype:attempted-recon; sid:200026307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qr.net",nocase; http_uri; content:"/hixeto",nocase; classtype:attempted-recon; sid:200026308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bczdkg?userid=ad1e2wno",nocase; classtype:attempted-recon; sid:200026309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bd5q48",nocase; classtype:attempted-recon; sid:200026310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bdfngf",nocase; classtype:attempted-recon; sid:200026311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quip.com",nocase; http_uri; content:"/jeh2aebbsh97",nocase; classtype:attempted-recon; sid:200026312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quip.com",nocase; http_uri; content:"/qv7malu8n7cz/you-have-some-messages-pending",nocase; classtype:attempted-recon; sid:200026313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rb.gy",nocase; http_uri; content:"/treccs",nocase; classtype:attempted-recon; sid:200026314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcl.ink",nocase; http_uri; content:"/dwi5d?/pages/services/2022",nocase; classtype:attempted-recon; sid:200026315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcl.ink",nocase; http_uri; content:"/mw80e?./help-accountcenter-service.gtempurl",nocase; classtype:attempted-recon; sid:200026316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcl.ink",nocase; http_uri; content:"/pztsj?./accountcenter-service",nocase; classtype:attempted-recon; sid:200026317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"readmodel.m.sogou.com",nocase; http_uri; content:"/medical?pc_url=https://health.usnews.com/doctors/li-lei-1012630&securl=ghy1rdnmwlqytqu2rfrhtf27kllqk76w&type=wap&wap_url=https://mail.ionos.com/",nocase; classtype:attempted-recon; sid:200026318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reamaam.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200026319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/digital8w89ocean09-12sdh/",nocase; classtype:attempted-recon; sid:200026320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/g8npsq6",nocase; classtype:attempted-recon; sid:200026321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/o1lz8r3/?email=registrar@nameshield.net",nocase; classtype:attempted-recon; sid:200026322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rectifywebwallet.com",nocase; http_uri; content:"/home.php",nocase; classtype:attempted-recon; sid:200026323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redatofadesafe.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200026324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reflexologyegypt.com",nocase; http_uri; content:"/111/",nocase; classtype:attempted-recon; sid:200026325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reikreitel.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200026326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rem.ax",nocase; http_uri; content:"/3zkzz3t",nocase; classtype:attempted-recon; sid:200026327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renew.trusted-travelers-online.com",nocase; http_uri; content:"/renew-global-entry",nocase; classtype:attempted-recon; sid:200026328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reurl.cc",nocase; http_uri; content:"/6e9zk5",nocase; classtype:attempted-recon; sid:200026329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reurl.cc",nocase; http_uri; content:"/g2emzn?coinbase?shiny",nocase; classtype:attempted-recon; sid:200026330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reurl.cc",nocase; http_uri; content:"/xeknoz?confirmation",nocase; classtype:attempted-recon; sid:200026331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reurl.cc",nocase; http_uri; content:"/xgmxr1",nocase; classtype:attempted-recon; sid:200026332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"review-request-attempt.com",nocase; http_uri; content:"/admin",nocase; classtype:attempted-recon; sid:200026333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rezunz.quip.com",nocase; http_uri; content:"/2d0jazx1eky5/click-here-to-verify-your-email",nocase; classtype:attempted-recon; sid:200026334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"riderctposten.blogspot.com",nocase; http_uri; content:"/2021/02/blog-post.html",nocase; classtype:attempted-recon; sid:200026335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"robinettearchitect.com",nocase; http_uri; content:"/wp-includes/widgets/ea8a/postch.php",nocase; classtype:attempted-recon; sid:200026336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"robinettearchitect.com",nocase; http_uri; content:"/wp-includes/widgets/ea8a/redirect.php?id=7c18c315d71119489192f48f2b84ad73",nocase; classtype:attempted-recon; sid:200026337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rotf.lol",nocase; http_uri; content:"/2p8ftv9d",nocase; classtype:attempted-recon; sid:200026338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"royalstarexport.com",nocase; http_uri; content:"/login.php",nocase; classtype:attempted-recon; sid:200026339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rplg.co",nocase; http_uri; content:"/920970d0",nocase; classtype:attempted-recon; sid:200026340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/-1akj3",nocase; classtype:attempted-recon; sid:200026341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/-1akkm",nocase; classtype:attempted-recon; sid:200026342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/-1anmf",nocase; classtype:attempted-recon; sid:200026343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/1auht",nocase; classtype:attempted-recon; sid:200026344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/1aupp",nocase; classtype:attempted-recon; sid:200026345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/1aw5z",nocase; classtype:attempted-recon; sid:200026346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/1c3ep",nocase; classtype:attempted-recon; sid:200026347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/1c93f",nocase; classtype:attempted-recon; sid:200026348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/1ceyc",nocase; classtype:attempted-recon; sid:200026349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/1chmq",nocase; classtype:attempted-recon; sid:200026350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/1ck7d",nocase; classtype:attempted-recon; sid:200026351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/1cno4",nocase; classtype:attempted-recon; sid:200026352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/1cqpr",nocase; classtype:attempted-recon; sid:200026353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/1cxse",nocase; classtype:attempted-recon; sid:200026354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/1d1ij",nocase; classtype:attempted-recon; sid:200026355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/1df5a",nocase; classtype:attempted-recon; sid:200026356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/1dtyl",nocase; classtype:attempted-recon; sid:200026357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/1du7b",nocase; classtype:attempted-recon; sid:200026358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/1e1sy",nocase; classtype:attempted-recon; sid:200026359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/sid-sparkasse-de",nocase; classtype:attempted-recon; sid:200026360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/sparkasse_id",nocase; classtype:attempted-recon; sid:200026361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s3.amazonaws.com",nocase; http_uri; content:"/appforest_uf/f1659940438853x998277208375893100/indexnew%20(1).html#xxx@yyy.zzz",nocase; classtype:attempted-recon; sid:200026362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s3.amazonaws.com",nocase; http_uri; content:"/appforest_uf/f1660255630080x575901172306382300/activefax-5.26.0.2600-mswin32-x64-403866.html#x@x.com",nocase; classtype:attempted-recon; sid:200026363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s3.amazonaws.com",nocase; http_uri; content:"/appforest_uf/f1660505490734x664811688952246000/index%20new.html#blara@bpd.com.do",nocase; classtype:attempted-recon; sid:200026364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s3.amazonaws.com",nocase; http_uri; content:"/safiepace/refn26.html",nocase; classtype:attempted-recon; sid:200026365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"samirsonte.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200026366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"script.google.com",nocase; http_uri; content:"/macros/s/akfycbxldfmsdlmc1xmyfvmhpijk0qxsnxurlh95jzz3qcvmodhollh-cgwk3ql47_ntzyajzw/exec",nocase; classtype:attempted-recon; sid:200026367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdzakfahz.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200026368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seaandsent.com",nocase; http_uri; content:"/scream/shout/",nocase; classtype:attempted-recon; sid:200026369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sefonta.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200026370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguritybrou.toti44433.repl.co",nocase; http_uri; content:"/index1.html",nocase; classtype:attempted-recon; sid:200026371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"selenaseifert.com.au",nocase; http_uri; content:"/wp-content/rederect/",nocase; classtype:attempted-recon; sid:200026372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seonewsservic.blogspot.com",nocase; http_uri; content:"/p/postenno_9.html",nocase; classtype:attempted-recon; sid:200026373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"serviceuspaym-client.com",nocase; http_uri; content:"/we%20logz%20sure/",nocase; classtype:attempted-recon; sid:200026374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfo3.digitaloceanspaces.com",nocase; http_uri; content:"/brknwmo228iaeysu0pjn81708/!%23&))!$!&()!/().$!&!$$$!)&.html",nocase; classtype:attempted-recon; sid:200026375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfo3.digitaloceanspaces.com",nocase; http_uri; content:"/brknwmo228iaeysu0pjn81708/%21%23%26%29%29%21%24%21%26%28%29%21/%28%29.%24%21%26%21%24%24%24%21%29%26.html#info@xx.ch",nocase; classtype:attempted-recon; sid:200026376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfo3.digitaloceanspaces.com",nocase; http_uri; content:"/teeblch7s892hd901syx17x80/!&!$!.(&&!$!$!/&&!$!&!$!0.$!$.html",nocase; classtype:attempted-recon; sid:200026377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfo3.digitaloceanspaces.com",nocase; http_uri; content:"/teeblch7s892hd901syx17x80/%21%26%21%24%21.%28%26%26%21%24%21%24%21/%26%26%21%24%21%26%21%24%210.%24%21%24.html",nocase; classtype:attempted-recon; sid:200026378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgdb91700-my.sharepoint.com",nocase; http_uri; content:"/:b:/g/personal/jean-claude-fernandes_sgdb91_com/exk2a_c6xsxouopoew83oxib65oghw_co2bz33les1rdxw",nocase; classtype:attempted-recon; sid:200026379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgp1.digitaloceanspaces.com",nocase; http_uri; content:"/0nlined0cufile0365/indexx.html",nocase; classtype:attempted-recon; sid:200026380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgp1.digitaloceanspaces.com",nocase; http_uri; content:"/12hd33er83241252sharefile/microsoftonline.htm",nocase; classtype:attempted-recon; sid:200026381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgp1.digitaloceanspaces.com",nocase; http_uri; content:"/j7trucking467/3sndftr.html",nocase; classtype:attempted-recon; sid:200026382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgp1.digitaloceanspaces.com",nocase; http_uri; content:"/m1cr05oft.0n1i3efile/indexx.html",nocase; classtype:attempted-recon; sid:200026383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgp1.digitaloceanspaces.com",nocase; http_uri; content:"/m1cr05oft.0n1i3efile/indexx.html#test@example.com",nocase; classtype:attempted-recon; sid:200026384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share.hsforms.com",nocase; http_uri; content:"/11c1i3ucrsjaeqnyxinop6ad5rxo",nocase; classtype:attempted-recon; sid:200026385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share.hsforms.com",nocase; http_uri; content:"/1fni_ent2sao6wqv0vzdn7g8nl9d",nocase; classtype:attempted-recon; sid:200026386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share.hsforms.com",nocase; http_uri; content:"/1onniqroftvoytwpvbgznvgd5749",nocase; classtype:attempted-recon; sid:200026387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share.hsforms.com",nocase; http_uri; content:"/1q6hj0hs8qeiyr1t5ntqimgd8cyx",nocase; classtype:attempted-recon; sid:200026388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share.hsforms.com",nocase; http_uri; content:"/1whluifnasr6s4ov9skogswd5n96",nocase; classtype:attempted-recon; sid:200026389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share.hsforms.com",nocase; http_uri; content:"/1zwug5hvmsuik9mhaflsx3gd9wnt",nocase; classtype:attempted-recon; sid:200026390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-document.com",nocase; http_uri; content:"/basic.php?k=d63621ef3dc01735479befc13f97ec7fdb68991d",nocase; classtype:attempted-recon; sid:200026391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shoppy.gg",nocase; http_uri; content:"/product/h5zibdt",nocase; classtype:attempted-recon; sid:200026392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shorturl.at",nocase; http_uri; content:"/nqgu1",nocase; classtype:attempted-recon; sid:200026393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shrinked.net",nocase; http_uri; content:"/3qfqu/",nocase; classtype:attempted-recon; sid:200026394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shrtco.de",nocase; http_uri; content:"/ful6dt",nocase; classtype:attempted-recon; sid:200026395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasky.net",nocase; http_uri; content:"/3afwle6bhk5rlnq803zm7eu8zm3zkfhlldr-b4t9p_341w",nocase; classtype:attempted-recon; sid:200026396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasky.net",nocase; http_uri; content:"/_akqyhyplj1c_lginnd9ty2il4mauxbcbphd5d5bcmb1fq",nocase; classtype:attempted-recon; sid:200026397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasky.net",nocase; http_uri; content:"/eabfipxuotyrq2s64nvd6onsb1fkomkprscpcbozv_m09w",nocase; classtype:attempted-recon; sid:200026398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasky.net",nocase; http_uri; content:"/eabibfvu2cs824kdijdrs-n_zwu-ye4drkasdgdocktsta",nocase; classtype:attempted-recon; sid:200026399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasky.net",nocase; http_uri; content:"/fag18n8hvnkfp4zws3dwpd1xfiplwcphsqzaf9mmmdik1a",nocase; classtype:attempted-recon; sid:200026400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasky.net",nocase; http_uri; content:"/fatgv8ucxcfgrk4pybv3lhfl3my6o6ulvq4aop_qhdqtuq/",nocase; classtype:attempted-recon; sid:200026401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasky.net",nocase; http_uri; content:"/haahgoeoqdaye0l99-06xz63yw8gqunhjwk8ordqv8fata/",nocase; classtype:attempted-recon; sid:200026402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasky.net",nocase; http_uri; content:"/hahsmctbyfibrprezjdzqk20xicttltoigbtijl2awvaca",nocase; classtype:attempted-recon; sid:200026403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasky.net",nocase; http_uri; content:"/jadbuv7rfhrbhffarhde7ajwr2z7xhqrgtzmthkruyrn3g",nocase; classtype:attempted-recon; sid:200026404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasky.net",nocase; http_uri; content:"/nabxlo66blswp8xrxx5pxmkkfwdrtoxbbq6xci7iiuwcmq",nocase; classtype:attempted-recon; sid:200026405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasky.net",nocase; http_uri; content:"/oac6ss6kdao6uwzyhhv0rzj_0cqv1b5zribel0lzrbgaoa?email=jackyyang2008@163.com",nocase; classtype:attempted-recon; sid:200026406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasky.net",nocase; http_uri; content:"/vaayqhcjskxbeu4bvfljtto23b9x5xoeaqfnj9td7f_94g",nocase; classtype:attempted-recon; sid:200026407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasky.net",nocase; http_uri; content:"/xafdablievokd6wlyokc5qzdvkunqt4gpk3flhjbcpwhog",nocase; classtype:attempted-recon; sid:200026408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasky.net",nocase; http_uri; content:"/xagdawh8ti0ygxlh10zruseqbru2efb2dmiuzf1c7hpigw",nocase; classtype:attempted-recon; sid:200026409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"simp.ly",nocase; http_uri; content:"/publish/xhrdvc",nocase; classtype:attempted-recon; sid:200026410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/a/sy4norton.com/setup/home",nocase; classtype:attempted-recon; sid:200026411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/amricalturs.net/download4/microsoft-office-365",nocase; classtype:attempted-recon; sid:200026412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/amricalturs.net/ks3/microsoft-office-365",nocase; classtype:attempted-recon; sid:200026413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/metamask-ios.com/metamaskchrromeextension/home",nocase; classtype:attempted-recon; sid:200026414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/metamask-ios.com/metamasklogin/home",nocase; classtype:attempted-recon; sid:200026415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/n12-netempresarial.com/empresa-nerd-n12/in%c3%adcio",nocase; classtype:attempted-recon; sid:200026416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/newservices.website/orange-mobiles/home",nocase; classtype:attempted-recon; sid:200026417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/newservices.website/service-reglement/",nocase; classtype:attempted-recon; sid:200026418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/newservices.website/service-reglement/home",nocase; classtype:attempted-recon; sid:200026419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/e9d24c72/23524457",nocase; classtype:attempted-recon; sid:200026420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/habbotuttogratis",nocase; classtype:attempted-recon; sid:200026421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/habbotuttogratis/assignments",nocase; classtype:attempted-recon; sid:200026422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/libretyreserve",nocase; classtype:attempted-recon; sid:200026423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/libretyreserve/",nocase; classtype:attempted-recon; sid:200026424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/protectedinmprovmnt44/",nocase; classtype:attempted-recon; sid:200026425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/safetycheck427064200647221/",nocase; classtype:attempted-recon; sid:200026426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/verifycheckpointpaqes/",nocase; classtype:attempted-recon; sid:200026427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/traconf-it.com/flashyfile/home",nocase; classtype:attempted-recon; sid:200026428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/019businessusersbt782btsignin/secure-update-com",nocase; classtype:attempted-recon; sid:200026429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/08ie-securepage-facebook",nocase; classtype:attempted-recon; sid:200026430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/09securebusinessusersonly-/secure-bt-com",nocase; classtype:attempted-recon; sid:200026431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/0iey-securepage-facebook",nocase; classtype:attempted-recon; sid:200026432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/0range-bank/accueil",nocase; classtype:attempted-recon; sid:200026433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/12noreplybtuserconnect365offic/secure-bt-com",nocase; classtype:attempted-recon; sid:200026434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/1mailxverificatio/home",nocase; classtype:attempted-recon; sid:200026435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/2-orangebank-salva/accueil",nocase; classtype:attempted-recon; sid:200026436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/3-orangebank-vetch/accueil",nocase; classtype:attempted-recon; sid:200026437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/302dir/accueil",nocase; classtype:attempted-recon; sid:200026438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/3254798fr78/uigiugi",nocase; classtype:attempted-recon; sid:200026439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/4-orangebank-toto/accueil",nocase; classtype:attempted-recon; sid:200026440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/565f34/microsoft-office-365",nocase; classtype:attempted-recon; sid:200026441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/65h7t65ygtdw5f4/bt",nocase; classtype:attempted-recon; sid:200026442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/65q-securepage-facebook",nocase; classtype:attempted-recon; sid:200026443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/91186co/",nocase; classtype:attempted-recon; sid:200026444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/98w72securebusinessbt-01/secure-update-com",nocase; classtype:attempted-recon; sid:200026445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/a3y-securepage-facebook",nocase; classtype:attempted-recon; sid:200026446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/abonnevocalweb/accueil?authuser=5",nocase; classtype:attempted-recon; sid:200026447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/abuse-privacy/",nocase; classtype:attempted-recon; sid:200026448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/access-office-aud-msg-us/home",nocase; classtype:attempted-recon; sid:200026449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/access-office-docxpdf-call-net/home",nocase; classtype:attempted-recon; sid:200026450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/access-salesorder/home",nocase; classtype:attempted-recon; sid:200026451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/access-voice-mail-pay-us/home",nocase; classtype:attempted-recon; sid:200026452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/accs-office-ml/home",nocase; classtype:attempted-recon; sid:200026453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/accs-p-o-us/home",nocase; classtype:attempted-recon; sid:200026454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/accsoffice-usa/home",nocase; classtype:attempted-recon; sid:200026455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/activationagrisecuriplus/accueil",nocase; classtype:attempted-recon; sid:200026456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/adrianoferriani/",nocase; classtype:attempted-recon; sid:200026457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/alert-app-pages/",nocase; classtype:attempted-recon; sid:200026458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/amldk/home",nocase; classtype:attempted-recon; sid:200026459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/amporangefr/accueil",nocase; classtype:attempted-recon; sid:200026460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/amsohappy/home",nocase; classtype:attempted-recon; sid:200026461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/app-mobile-uuid/recovery",nocase; classtype:attempted-recon; sid:200026462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/appli-ob-securite/accueil",nocase; classtype:attempted-recon; sid:200026463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/appli-ob/accueil",nocase; classtype:attempted-recon; sid:200026464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/appli-obank-serv/accueil",nocase; classtype:attempted-recon; sid:200026465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/appli-scur-obankps/accueil",nocase; classtype:attempted-recon; sid:200026466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/applkactu/accueil",nocase; classtype:attempted-recon; sid:200026467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/apps-authentification-forte-ob/accueil",nocase; classtype:attempted-recon; sid:200026468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/apps-mbl2/accueil",nocase; classtype:attempted-recon; sid:200026469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/apps-obank-apli/accueil",nocase; classtype:attempted-recon; sid:200026470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/apps-secure-ob/accueil",nocase; classtype:attempted-recon; sid:200026471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/apps-securite-ob/accueil",nocase; classtype:attempted-recon; sid:200026472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/aqwsas",nocase; classtype:attempted-recon; sid:200026473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/asdfghjklhgfdsdfgh/home",nocase; classtype:attempted-recon; sid:200026474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/atendimento-online-emissao/in%c3%adcio",nocase; classtype:attempted-recon; sid:200026475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/atendimentomarnobre/p%c3%a1gina-inicial",nocase; classtype:attempted-recon; sid:200026476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/att-home/home",nocase; classtype:attempted-recon; sid:200026477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/att-mail-update/home",nocase; classtype:attempted-recon; sid:200026478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/att-managements/home",nocase; classtype:attempted-recon; sid:200026479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/att-net-/home",nocase; classtype:attempted-recon; sid:200026480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attemailfox7/home",nocase; classtype:attempted-recon; sid:200026481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attemler7/home",nocase; classtype:attempted-recon; sid:200026482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attfeatures/home",nocase; classtype:attempted-recon; sid:200026483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attlattlattlatt/home",nocase; classtype:attempted-recon; sid:200026484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attmailcustomerupdate/home",nocase; classtype:attempted-recon; sid:200026485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attmaillogservise/attmail",nocase; classtype:attempted-recon; sid:200026486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attndattndatt/home",nocase; classtype:attempted-recon; sid:200026487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attnet-104921/att",nocase; classtype:attempted-recon; sid:200026488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attnetli/home",nocase; classtype:attempted-recon; sid:200026489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attnetlogsignmail/att-net",nocase; classtype:attempted-recon; sid:200026490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attnetlogsservce/att-net",nocase; classtype:attempted-recon; sid:200026491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attonline00/home",nocase; classtype:attempted-recon; sid:200026492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attserv111cust/home",nocase; classtype:attempted-recon; sid:200026493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attttstttegegrsksw/home",nocase; classtype:attempted-recon; sid:200026494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attudnie/home",nocase; classtype:attempted-recon; sid:200026495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attupdateobo/home",nocase; classtype:attempted-recon; sid:200026496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attweb22/home",nocase; classtype:attempted-recon; sid:200026497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attweblysiteupgrade/home",nocase; classtype:attempted-recon; sid:200026498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attyahoomail7/home",nocase; classtype:attempted-recon; sid:200026499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attyahooohroffice231/home",nocase; classtype:attempted-recon; sid:200026500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/authen-secure-obank/accueil",nocase; classtype:attempted-recon; sid:200026501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/authentification-apps-ob/accueil",nocase; classtype:attempted-recon; sid:200026502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/authentification-ob/accueil",nocase; classtype:attempted-recon; sid:200026503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/authentification-orangebank-eu/accueil",nocase; classtype:attempted-recon; sid:200026504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/authentifications-ob/accueil",nocase; classtype:attempted-recon; sid:200026505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/awspage",nocase; classtype:attempted-recon; sid:200026506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/background-in",nocase; classtype:attempted-recon; sid:200026507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bacopremolista/accueil",nocase; classtype:attempted-recon; sid:200026508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/baltimoreassessoria",nocase; classtype:attempted-recon; sid:200026509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/banquepostalebanqueetassurance/accueil",nocase; classtype:attempted-recon; sid:200026510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bbroadband110/home?authuser=4",nocase; classtype:attempted-recon; sid:200026511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bbtbroadband/home?authuser=9",nocase; classtype:attempted-recon; sid:200026512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bcp-mille/home-page",nocase; classtype:attempted-recon; sid:200026513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bctw/home",nocase; classtype:attempted-recon; sid:200026514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/benachrichtigung-sparkasse/accueil",nocase; classtype:attempted-recon; sid:200026515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/biorange/",nocase; classtype:attempted-recon; sid:200026516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bletoemisao/in%c3%adcio",nocase; classtype:attempted-recon; sid:200026517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/broadbandplc/home",nocase; classtype:attempted-recon; sid:200026518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bt-2022-user/home",nocase; classtype:attempted-recon; sid:200026519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bt-cloud-voice-review-voice/bt-voice-cloud",nocase; classtype:attempted-recon; sid:200026520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bt-clould-preview000112/voice010101010bt-cloud?authuser=8",nocase; classtype:attempted-recon; sid:200026521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bt-pdf-receipt-payment/www-bt-pdf?authuser=8",nocase; classtype:attempted-recon; sid:200026522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bt-users/secure-business-bt-com",nocase; classtype:attempted-recon; sid:200026523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bt-voice1010010/bt-voicemesaage10120201002?authuser=8",nocase; classtype:attempted-recon; sid:200026524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btaert/home",nocase; classtype:attempted-recon; sid:200026525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbillreview/home",nocase; classtype:attempted-recon; sid:200026526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbraodbandteam/home",nocase; classtype:attempted-recon; sid:200026527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbriadbandteam/home",nocase; classtype:attempted-recon; sid:200026528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbroadbandlin/home",nocase; classtype:attempted-recon; sid:200026529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbroadbandplc/home?authuser=7",nocase; classtype:attempted-recon; sid:200026530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbroadbandplc1/home?authuser=1",nocase; classtype:attempted-recon; sid:200026531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbroadbandteam/home?authuser=5",nocase; classtype:attempted-recon; sid:200026532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbroadbandweb/home",nocase; classtype:attempted-recon; sid:200026533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbroadli/home",nocase; classtype:attempted-recon; sid:200026534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbtbtbtbtbtcomm/home",nocase; classtype:attempted-recon; sid:200026535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbusinessx/bt",nocase; classtype:attempted-recon; sid:200026536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btcloudpaymentinvoice202000/httpsbtcloudvm-voice-new?authuser=1",nocase; classtype:attempted-recon; sid:200026537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btcloudvoice-mv0001/home?authuser=3",nocase; classtype:attempted-recon; sid:200026538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btconnectbusiness/btconnect",nocase; classtype:attempted-recon; sid:200026539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btconnectmailserver/home",nocase; classtype:attempted-recon; sid:200026540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btconnectsecurebusinesbtcom/bt-connect",nocase; classtype:attempted-recon; sid:200026541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btcustomerservice/home",nocase; classtype:attempted-recon; sid:200026542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btee0/home",nocase; classtype:attempted-recon; sid:200026543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btem/home",nocase; classtype:attempted-recon; sid:200026544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btemailwebmailer/home",nocase; classtype:attempted-recon; sid:200026545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btintern/bt-com",nocase; classtype:attempted-recon; sid:200026546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btinternet42day/home",nocase; classtype:attempted-recon; sid:200026547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btinternetco/home",nocase; classtype:attempted-recon; sid:200026548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btinterneter34567/home",nocase; classtype:attempted-recon; sid:200026549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btmailerupdatee/home",nocase; classtype:attempted-recon; sid:200026550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btmv-voice-notice011/btvoicemessage?authuser=8",nocase; classtype:attempted-recon; sid:200026551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btmv/home",nocase; classtype:attempted-recon; sid:200026552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btnvm-urgentnotice/btvmnew-note?authuser=1",nocase; classtype:attempted-recon; sid:200026553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btserver10/home",nocase; classtype:attempted-recon; sid:200026554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btservicebill/home",nocase; classtype:attempted-recon; sid:200026555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btsuporteamsup/home",nocase; classtype:attempted-recon; sid:200026556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bttbriadbandteam/home",nocase; classtype:attempted-recon; sid:200026557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bttbusinesssss/home",nocase; classtype:attempted-recon; sid:200026558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bttelecom/home?authuser=1",nocase; classtype:attempted-recon; sid:200026559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bttelecomm-/home?authuser=5",nocase; classtype:attempted-recon; sid:200026560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bttelecomm0/home?authuser=2",nocase; classtype:attempted-recon; sid:200026561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bttelecommication/home",nocase; classtype:attempted-recon; sid:200026562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bttelecommservice/home?authuser=5",nocase; classtype:attempted-recon; sid:200026563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bttelecommunication-plc/home?authuser=2",nocase; classtype:attempted-recon; sid:200026564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btuiytretyudfgjh/home",nocase; classtype:attempted-recon; sid:200026565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btwebmailww/home",nocase; classtype:attempted-recon; sid:200026566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btwebsuppor/home",nocase; classtype:attempted-recon; sid:200026567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btweeb/home",nocase; classtype:attempted-recon; sid:200026568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btworkingteam/home?authuser=5",nocase; classtype:attempted-recon; sid:200026569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btworkking/home",nocase; classtype:attempted-recon; sid:200026570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btworldwide/home?authuser=4",nocase; classtype:attempted-recon; sid:200026571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/businesbtnewbroadband-hub/update-bt-com",nocase; classtype:attempted-recon; sid:200026572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/business-btbtb-office365/secure-bt-business-com?authuse%20r=3",nocase; classtype:attempted-recon; sid:200026573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/business-btbtb-office365/secure-bt-business-com?authuser=3",nocase; classtype:attempted-recon; sid:200026574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/businessbtxpress/update-bt-com",nocase; classtype:attempted-recon; sid:200026575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/buxtonbreweryofficial/official",nocase; classtype:attempted-recon; sid:200026576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/capitaloneloginus/home",nocase; classtype:attempted-recon; sid:200026577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ccjkc/home",nocase; classtype:attempted-recon; sid:200026578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/certiauthavril/accueil",nocase; classtype:attempted-recon; sid:200026579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/cgnvzmx/att",nocase; classtype:attempted-recon; sid:200026580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/chamekesa/accueil",nocase; classtype:attempted-recon; sid:200026581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/chamekesa/accueil?authuser=3",nocase; classtype:attempted-recon; sid:200026582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/chamfare/accueil",nocase; classtype:attempted-recon; sid:200026583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/charlisto/accueil",nocase; classtype:attempted-recon; sid:200026584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/clickpagenewlogin2021",nocase; classtype:attempted-recon; sid:200026585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/clxyxsnh/home",nocase; classtype:attempted-recon; sid:200026586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/coinsbuysellswapcryptocurrency/?fbclid=iwar2isl9xfxxgcxtftml2hmcl_dglhshlkfkpdotycyqu-qjqqfdqm9whtfm",nocase; classtype:attempted-recon; sid:200026587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/comfimobiekdofl/accueil",nocase; classtype:attempted-recon; sid:200026588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/community-pages-app/",nocase; classtype:attempted-recon; sid:200026589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/community-relief-program/crf-dispatch-illustration",nocase; classtype:attempted-recon; sid:200026590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/community-relief-program/home",nocase; classtype:attempted-recon; sid:200026591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/condado-duo-luis-pagan-/home",nocase; classtype:attempted-recon; sid:200026592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/confirmation-orangabank/accueil",nocase; classtype:attempted-recon; sid:200026593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/confirmationacces",nocase; classtype:attempted-recon; sid:200026594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/confirmationacces/verify-pages",nocase; classtype:attempted-recon; sid:200026595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/connectionperdue/accueil",nocase; classtype:attempted-recon; sid:200026596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/connectolo/accueil",nocase; classtype:attempted-recon; sid:200026597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/connectsvqq",nocase; classtype:attempted-recon; sid:200026598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/control-service/home",nocase; classtype:attempted-recon; sid:200026599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/controlpanel-ovh?/48700315fr640w648",nocase; classtype:attempted-recon; sid:200026600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/couldie/accueil",nocase; classtype:attempted-recon; sid:200026601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ctz03",nocase; classtype:attempted-recon; sid:200026602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/currentlyserver/home",nocase; classtype:attempted-recon; sid:200026603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/cvrpd/home",nocase; classtype:attempted-recon; sid:200026604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/d-aps-orge-secure/accueil",nocase; classtype:attempted-recon; sid:200026605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dambt/home?authuser=6",nocase; classtype:attempted-recon; sid:200026606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/damilolwas/home",nocase; classtype:attempted-recon; sid:200026607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/damilosadde/home?authuser=7",nocase; classtype:attempted-recon; sid:200026608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dasbvmk/home",nocase; classtype:attempted-recon; sid:200026609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dbs-com-g/privacy-policy",nocase; classtype:attempted-recon; sid:200026610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/debloquagedescompte/page",nocase; classtype:attempted-recon; sid:200026611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dfghjhckuyf/home",nocase; classtype:attempted-recon; sid:200026612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dfghjhl/home",nocase; classtype:attempted-recon; sid:200026613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dgjhjjojhgffg/accueil",nocase; classtype:attempted-recon; sid:200026614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dhddfhdfhcom/att",nocase; classtype:attempted-recon; sid:200026615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/directionmessageriemonespace/accueil",nocase; classtype:attempted-recon; sid:200026616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/directionobweb/accueil",nocase; classtype:attempted-recon; sid:200026617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dispo-obankweb/accueil",nocase; classtype:attempted-recon; sid:200026618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/divsec20/accueil",nocase; classtype:attempted-recon; sid:200026619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dkdfkazii-ofoqisjaz1wk/accueil",nocase; classtype:attempted-recon; sid:200026620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dkekkeole/home",nocase; classtype:attempted-recon; sid:200026621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/doelza/accueil",nocase; classtype:attempted-recon; sid:200026622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dshrkuoiuhgkjkjlkmjyhhfhj/bt",nocase; classtype:attempted-recon; sid:200026623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/eaglemaddez/accueil",nocase; classtype:attempted-recon; sid:200026624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/eikp-securepage-facebook",nocase; classtype:attempted-recon; sid:200026625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/erydkjsdkhfgjfhjdkh/bt",nocase; classtype:attempted-recon; sid:200026626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/es-pace-clien-ts/",nocase; classtype:attempted-recon; sid:200026627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espa-ce-clien-ts00/accueil",nocase; classtype:attempted-recon; sid:200026628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espa-ce-de/accueil",nocase; classtype:attempted-recon; sid:200026629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espace-orange-vocal/accueil",nocase; classtype:attempted-recon; sid:200026630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espace-vocal-orange/",nocase; classtype:attempted-recon; sid:200026631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espace-vocalorange-ref0325/",nocase; classtype:attempted-recon; sid:200026632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espace-vocalorange-ref0325/accueil",nocase; classtype:attempted-recon; sid:200026633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espaceclient-orange03html5/accueil",nocase; classtype:attempted-recon; sid:200026634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espaceclientscuritvfvfdsvsf/accueil",nocase; classtype:attempted-recon; sid:200026635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espacemessagerieorangesms/accueil",nocase; classtype:attempted-recon; sid:200026636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/estomcasting/accueil?authuser=1",nocase; classtype:attempted-recon; sid:200026637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/etyajdnxnskoeprlwyaxbdhfkrituy/btconnect",nocase; classtype:attempted-recon; sid:200026638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/exodus-wallet-shared-rewards",nocase; classtype:attempted-recon; sid:200026639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fa-ctu-re-es-pace00/",nocase; classtype:attempted-recon; sid:200026640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fa-ctu-re-es-pace00/accueil",nocase; classtype:attempted-recon; sid:200026641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fabiodhouman",nocase; classtype:attempted-recon; sid:200026642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fac-tura-tion-esp-ace05/home",nocase; classtype:attempted-recon; sid:200026643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/factu-re-clients/accueil",nocase; classtype:attempted-recon; sid:200026644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fantasticpage-in",nocase; classtype:attempted-recon; sid:200026645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fatct-ure-es-pace01/home",nocase; classtype:attempted-recon; sid:200026646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fatherplac/accueil",nocase; classtype:attempted-recon; sid:200026647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fatu-ration-esp01/",nocase; classtype:attempted-recon; sid:200026648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fcg133/att",nocase; classtype:attempted-recon; sid:200026649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/feelblessed/bt-business",nocase; classtype:attempted-recon; sid:200026650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/feriousca/accueil",nocase; classtype:attempted-recon; sid:200026651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ffduefuefsbc/att",nocase; classtype:attempted-recon; sid:200026652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/flmkgknzklfgklfgk/home",nocase; classtype:attempted-recon; sid:200026653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/form-recovery/",nocase; classtype:attempted-recon; sid:200026654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/form-recovery/details",nocase; classtype:attempted-recon; sid:200026655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/france-banque/accueil",nocase; classtype:attempted-recon; sid:200026656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/frdfhhh/yahoo-mail",nocase; classtype:attempted-recon; sid:200026657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fscdsh/home",nocase; classtype:attempted-recon; sid:200026658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fssghsfd/home",nocase; classtype:attempted-recon; sid:200026659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/gajiview/yahoo-com",nocase; classtype:attempted-recon; sid:200026660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/gdhbfcxzx",nocase; classtype:attempted-recon; sid:200026661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ggfhftwyjfj/home",nocase; classtype:attempted-recon; sid:200026662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/gmxmailerfttfd/home",nocase; classtype:attempted-recon; sid:200026663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/gmxupdate/home",nocase; classtype:attempted-recon; sid:200026664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/golppu/page-recovery-2022",nocase; classtype:attempted-recon; sid:200026665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/gsdeaq",nocase; classtype:attempted-recon; sid:200026666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/h6wrjhcs6tt9fwphome/home",nocase; classtype:attempted-recon; sid:200026667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/hbxchx",nocase; classtype:attempted-recon; sid:200026668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/hccwc/home",nocase; classtype:attempted-recon; sid:200026669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/hdgfgv",nocase; classtype:attempted-recon; sid:200026670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/hfggdfyhcom/yahoo-mail",nocase; classtype:attempted-recon; sid:200026671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/hfgggggggggggggg/home",nocase; classtype:attempted-recon; sid:200026672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/home-bt-updates/bt-com",nocase; classtype:attempted-recon; sid:200026673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/home-pages-recovery/details",nocase; classtype:attempted-recon; sid:200026674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/hommem-loggiinnformm/home?authuser=2",nocase; classtype:attempted-recon; sid:200026675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/httpbtbroadband/home",nocase; classtype:attempted-recon; sid:200026676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/htvvss/home?authuser=3",nocase; classtype:attempted-recon; sid:200026677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/hvgfdcftfttf/home",nocase; classtype:attempted-recon; sid:200026678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ii-securepage-facebook",nocase; classtype:attempted-recon; sid:200026679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/inf0ssgss/accueil",nocase; classtype:attempted-recon; sid:200026680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/infoline439pent0line/accueil/untitled-page/fdsls32?authuser=6",nocase; classtype:attempted-recon; sid:200026681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/invoice-payment-pdf/home",nocase; classtype:attempted-recon; sid:200026682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/invoicehomepdf/home",nocase; classtype:attempted-recon; sid:200026683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/jcnvvn/home",nocase; classtype:attempted-recon; sid:200026684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/jdvdksf/home",nocase; classtype:attempted-recon; sid:200026685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/jio-tower-installation-apply/",nocase; classtype:attempted-recon; sid:200026686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/jlkb6rf/apps-support",nocase; classtype:attempted-recon; sid:200026687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/jmjmnhvdc/home",nocase; classtype:attempted-recon; sid:200026688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/jnbhgv/home",nocase; classtype:attempted-recon; sid:200026689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/juif00012/accueil",nocase; classtype:attempted-recon; sid:200026690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/kjhydc6yh/home",nocase; classtype:attempted-recon; sid:200026691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/kjnbhgvcfd/home",nocase; classtype:attempted-recon; sid:200026692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/koiuld2dkjcxnjk2s/",nocase; classtype:attempted-recon; sid:200026693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/landbankredirect/home",nocase; classtype:attempted-recon; sid:200026694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/leafadd/accueil",nocase; classtype:attempted-recon; sid:200026695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/leafpadrode/accueil",nocase; classtype:attempted-recon; sid:200026696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/lidl-bg22/bg?fbclid=iwar3vyju-ddafnwfna5hgyotzwb0pjkbcfmwydmyrixienrmngx7gzksmlom",nocase; classtype:attempted-recon; sid:200026697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/line01-centre/accueil?authuser=2",nocase; classtype:attempted-recon; sid:200026698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/lkdiur24/accueil/secureli20",nocase; classtype:attempted-recon; sid:200026699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/lkoeir3190/accueil",nocase; classtype:attempted-recon; sid:200026700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/llllogin-home-pageaa1/www-btconnect-com",nocase; classtype:attempted-recon; sid:200026701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/log-inpagenew",nocase; classtype:attempted-recon; sid:200026702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/loltym/accueil",nocase; classtype:attempted-recon; sid:200026703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/magazineluiza22/promo%c3%a7%c3%b5es",nocase; classtype:attempted-recon; sid:200026704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mailcustomerservices/home",nocase; classtype:attempted-recon; sid:200026705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mailtoh/home?read_current=1",nocase; classtype:attempted-recon; sid:200026706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mailyahooservicesverifynow/home?read_current=1",nocase; classtype:attempted-recon; sid:200026707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mallhitoh/home",nocase; classtype:attempted-recon; sid:200026708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mallofuaq/halaman-muka",nocase; classtype:attempted-recon; sid:200026709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/manager3-controlpanel-ovh",nocase; classtype:attempted-recon; sid:200026710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/maxatserv/home",nocase; classtype:attempted-recon; sid:200026711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/maxmaner/home",nocase; classtype:attempted-recon; sid:200026712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mcwdbvefjberjrwgnwriviwr/home",nocase; classtype:attempted-recon; sid:200026713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/messagerie-vocalorange-gms-mms/accueil",nocase; classtype:attempted-recon; sid:200026714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/messagerie-vocalorange/accueil?authuser=2",nocase; classtype:attempted-recon; sid:200026715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/messageriehtlmxccvsdfvf/accueil",nocase; classtype:attempted-recon; sid:200026716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/messor/accueil",nocase; classtype:attempted-recon; sid:200026717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mldof",nocase; classtype:attempted-recon; sid:200026718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mmanuel/attyahoo",nocase; classtype:attempted-recon; sid:200026719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mndirilivin-online/verifikasi",nocase; classtype:attempted-recon; sid:200026720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mnoko",nocase; classtype:attempted-recon; sid:200026721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mobile-apps-pages/",nocase; classtype:attempted-recon; sid:200026722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mobile-redirect-system",nocase; classtype:attempted-recon; sid:200026723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/monbonusclicetmoi/",nocase; classtype:attempted-recon; sid:200026724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mssft22/home",nocase; classtype:attempted-recon; sid:200026725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mv-voicepage/home?authuser=8",nocase; classtype:attempted-recon; sid:200026726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/myatt-home/home",nocase; classtype:attempted-recon; sid:200026727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/myattworldconnection90/home",nocase; classtype:attempted-recon; sid:200026728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mycoinwallet/",nocase; classtype:attempted-recon; sid:200026729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/n12-acessologinempresanet",nocase; classtype:attempted-recon; sid:200026730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/n12-acessologinempresanet/",nocase; classtype:attempted-recon; sid:200026731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/name29/home",nocase; classtype:attempted-recon; sid:200026732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/necrologieinfosfroravocal/accueil",nocase; classtype:attempted-recon; sid:200026733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/nefsuddma/accueil",nocase; classtype:attempted-recon; sid:200026734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/new-service/home",nocase; classtype:attempted-recon; sid:200026735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/newbtmissedcall/home",nocase; classtype:attempted-recon; sid:200026736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/newuploadpage",nocase; classtype:attempted-recon; sid:200026737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/newvoicemail/home?authuser=1",nocase; classtype:attempted-recon; sid:200026738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/nextprojectpage",nocase; classtype:attempted-recon; sid:200026739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/nextprojectpage2022",nocase; classtype:attempted-recon; sid:200026740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/notice-pagesecure",nocase; classtype:attempted-recon; sid:200026741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/noticeplaypagenew2021",nocase; classtype:attempted-recon; sid:200026742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/noticepublicpagenew2021",nocase; classtype:attempted-recon; sid:200026743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/noticeservice2022",nocase; classtype:attempted-recon; sid:200026744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/notifcationnoticesystempage",nocase; classtype:attempted-recon; sid:200026745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/nouveau-sms-message-vocal/accueil",nocase; classtype:attempted-recon; sid:200026746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-certifier/accueil",nocase; classtype:attempted-recon; sid:200026747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-identifweb/accueil",nocase; classtype:attempted-recon; sid:200026748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-seccurite/accueil",nocase; classtype:attempted-recon; sid:200026749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-securite-/accueil",nocase; classtype:attempted-recon; sid:200026750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-securite-eu/accueil",nocase; classtype:attempted-recon; sid:200026751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-securite/accueil",nocase; classtype:attempted-recon; sid:200026752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-securites/accueil",nocase; classtype:attempted-recon; sid:200026753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-service/accueil",nocase; classtype:attempted-recon; sid:200026754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-verifie/accueil",nocase; classtype:attempted-recon; sid:200026755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/obank-authentificat-forte/accueil",nocase; classtype:attempted-recon; sid:200026756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/obank-securit/accueil",nocase; classtype:attempted-recon; sid:200026757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/obespaceweb/accueil",nocase; classtype:attempted-recon; sid:200026758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/office-com-mail/home",nocase; classtype:attempted-recon; sid:200026759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/office-srv-cnt-us/home",nocase; classtype:attempted-recon; sid:200026760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/offiice-voice-com/home",nocase; classtype:attempted-recon; sid:200026761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/olarico--fact05/",nocase; classtype:attempted-recon; sid:200026762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/online-zkb-0",nocase; classtype:attempted-recon; sid:200026763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/online-zkb-1",nocase; classtype:attempted-recon; sid:200026764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/online-zkb-2",nocase; classtype:attempted-recon; sid:200026765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/onlineemail890/home?authuser=1",nocase; classtype:attempted-recon; sid:200026766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/onlinefifthercheckaccout/home",nocase; classtype:attempted-recon; sid:200026767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/or-pro-mobiles-et-forfaits/accueil",nocase; classtype:attempted-recon; sid:200026768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangbnk/accueil",nocase; classtype:attempted-recon; sid:200026769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orange-b-securite/accueil",nocase; classtype:attempted-recon; sid:200026770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orange-espace-client1/accueil",nocase; classtype:attempted-recon; sid:200026771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orange-facture1/admin",nocase; classtype:attempted-recon; sid:200026772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orange-forfaits-et-mobiles",nocase; classtype:attempted-recon; sid:200026773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orange-forfaits-et-mobiles/accueil",nocase; classtype:attempted-recon; sid:200026774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orange-forfaits-et-mobiles/accueil?authuser=1",nocase; classtype:attempted-recon; sid:200026775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeb-190/accueil",nocase; classtype:attempted-recon; sid:200026776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeb171/accueil",nocase; classtype:attempted-recon; sid:200026777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeb221/accueil",nocase; classtype:attempted-recon; sid:200026778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeba/accueil",nocase; classtype:attempted-recon; sid:200026779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeban/accueil",nocase; classtype:attempted-recon; sid:200026780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebank-22/accueil",nocase; classtype:attempted-recon; sid:200026781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebank-r/accueil",nocase; classtype:attempted-recon; sid:200026782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebank-sc/accueil",nocase; classtype:attempted-recon; sid:200026783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebank-secure-secure/accueil",nocase; classtype:attempted-recon; sid:200026784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebanksecurite/accueil",nocase; classtype:attempted-recon; sid:200026785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebannk/accueil",nocase; classtype:attempted-recon; sid:200026786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeclient2/accueil",nocase; classtype:attempted-recon; sid:200026787; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeclient2/fact458",nocase; classtype:attempted-recon; sid:200026788; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangehtmlcofirmationqcdsvcdvf/accueil",nocase; classtype:attempted-recon; sid:200026789; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeibank/accueil",nocase; classtype:attempted-recon; sid:200026790; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeinfosvocalnews/accueil",nocase; classtype:attempted-recon; sid:200026791; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangemms/accueil",nocase; classtype:attempted-recon; sid:200026792; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangemyconnect/accueil",nocase; classtype:attempted-recon; sid:200026793; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeportailretun/accueil",nocase; classtype:attempted-recon; sid:200026794; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangesecurishtmlvnc/accueil",nocase; classtype:attempted-recon; sid:200026795; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangesupp",nocase; classtype:attempted-recon; sid:200026796; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangesupp/accueil",nocase; classtype:attempted-recon; sid:200026797; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangevocalwebmaildigital/accueil",nocase; classtype:attempted-recon; sid:200026798; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/oranggebank/accueil",nocase; classtype:attempted-recon; sid:200026799; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangiebank/accueil",nocase; classtype:attempted-recon; sid:200026800; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ormas/accueil",nocase; classtype:attempted-recon; sid:200026801; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/p2j/home",nocase; classtype:attempted-recon; sid:200026802; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pagenewlogin2022",nocase; classtype:attempted-recon; sid:200026803; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/paissnsns/accueil",nocase; classtype:attempted-recon; sid:200026804; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pass-press/accueil",nocase; classtype:attempted-recon; sid:200026805; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pass-securit-societe-generale/accueil",nocase; classtype:attempted-recon; sid:200026806; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pay-ez-vo-tre-fa-cture/",nocase; classtype:attempted-recon; sid:200026807; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pay-ez-votre-fact-ure10/",nocase; classtype:attempted-recon; sid:200026808; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pay-ez-votre-fact-ure10/accueil",nocase; classtype:attempted-recon; sid:200026809; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/paypal-customer-services/",nocase; classtype:attempted-recon; sid:200026810; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/paypal-loginn/",nocase; classtype:attempted-recon; sid:200026811; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pfherjwlsnmcyelwudy/home?authuser=3",nocase; classtype:attempted-recon; sid:200026812; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pkm6w/recovery-page-support",nocase; classtype:attempted-recon; sid:200026813; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pleasecheckpoint2021",nocase; classtype:attempted-recon; sid:200026814; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pleaseclickplaypagenew",nocase; classtype:attempted-recon; sid:200026815; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pleaseclicktopage",nocase; classtype:attempted-recon; sid:200026816; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/portailscurit-orange/accueil?authuser=6",nocase; classtype:attempted-recon; sid:200026817; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/portailscuritorange/accueil",nocase; classtype:attempted-recon; sid:200026818; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/postacerticodplusaccaccueil/accueil",nocase; classtype:attempted-recon; sid:200026819; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/preferences-coordonnees?bredbanquepopulaire.fr/authentification/transactionnel",nocase; classtype:attempted-recon; sid:200026820; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/private-bt-policy/home",nocase; classtype:attempted-recon; sid:200026821; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/projectupdatepage2022",nocase; classtype:attempted-recon; sid:200026822; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/protonmailservice/home",nocase; classtype:attempted-recon; sid:200026823; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pstbrand",nocase; classtype:attempted-recon; sid:200026824; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pushfarcot/accueil",nocase; classtype:attempted-recon; sid:200026825; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/quickmailer/yahoo-com",nocase; classtype:attempted-recon; sid:200026826; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/quickteamservice/yahoo-com",nocase; classtype:attempted-recon; sid:200026827; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/r64t9/security-page-recovery",nocase; classtype:attempted-recon; sid:200026828; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/rainfall1/sign-in-your-bt-mail/sign-in-your-bt-mail",nocase; classtype:attempted-recon; sid:200026829; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/recatss/accueil",nocase; classtype:attempted-recon; sid:200026830; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/redirect-acctpages-uuid/details",nocase; classtype:attempted-recon; sid:200026831; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/redirectme-to/",nocase; classtype:attempted-recon; sid:200026832; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/redirectmybank/home",nocase; classtype:attempted-recon; sid:200026833; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/regionglobaleactivate/accueil",nocase; classtype:attempted-recon; sid:200026834; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/regionphfrancecentrerelations/accueil",nocase; classtype:attempted-recon; sid:200026835; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/regionphp/accueil",nocase; classtype:attempted-recon; sid:200026836; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/register-reward/home",nocase; classtype:attempted-recon; sid:200026837; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/regl-ement-fac-tu-re/accueil",nocase; classtype:attempted-recon; sid:200026838; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ret4e/home",nocase; classtype:attempted-recon; sid:200026839; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/review00zzz01/bt-home-com",nocase; classtype:attempted-recon; sid:200026840; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/reviewappspagerviicee/",nocase; classtype:attempted-recon; sid:200026841; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/richcoff/bt-business",nocase; classtype:attempted-recon; sid:200026842; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/rimekahsdjg/summary_page",nocase; classtype:attempted-recon; sid:200026843; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/rnorangefisrt/12547op",nocase; classtype:attempted-recon; sid:200026844; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/rvcefte/recovery-suport",nocase; classtype:attempted-recon; sid:200026845; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sadcfasdc?facebook-security/",nocase; classtype:attempted-recon; sid:200026846; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sadfrsg/home",nocase; classtype:attempted-recon; sid:200026847; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/salimkaso/",nocase; classtype:attempted-recon; sid:200026848; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/saudipost-spl",nocase; classtype:attempted-recon; sid:200026849; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sbcglobalm/home?authuser=1",nocase; classtype:attempted-recon; sid:200026850; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sbcglobalmaillerrrr/att-net",nocase; classtype:attempted-recon; sid:200026851; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sbcglobalnetbellsouth/att-yahoo-mail-com",nocase; classtype:attempted-recon; sid:200026852; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sbcweb22/home",nocase; classtype:attempted-recon; sid:200026853; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sdbdbdbdbd/home",nocase; classtype:attempted-recon; sid:200026854; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/seccure-business/secure-business-bt",nocase; classtype:attempted-recon; sid:200026855; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/section-ob-web/accueil",nocase; classtype:attempted-recon; sid:200026856; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/secure-bt-homevoice01010120/home?authuser=8",nocase; classtype:attempted-recon; sid:200026857; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/secure-ob-/accueil",nocase; classtype:attempted-recon; sid:200026858; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/secure-ob/accueil",nocase; classtype:attempted-recon; sid:200026859; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securebtusers/businessbt",nocase; classtype:attempted-recon; sid:200026860; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securenoticepage2022",nocase; classtype:attempted-recon; sid:200026861; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securiplus0101/accueil",nocase; classtype:attempted-recon; sid:200026862; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securite-app-obank/accueil",nocase; classtype:attempted-recon; sid:200026863; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securite-ob-service/accueil",nocase; classtype:attempted-recon; sid:200026864; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securite-obank/accueil",nocase; classtype:attempted-recon; sid:200026865; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securitee-ob/accueil",nocase; classtype:attempted-recon; sid:200026866; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securites-ob/accueil",nocase; classtype:attempted-recon; sid:200026867; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securree/home?authuser=1",nocase; classtype:attempted-recon; sid:200026868; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securritee-ob/accueil",nocase; classtype:attempted-recon; sid:200026869; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/seecurebusiness-/bt",nocase; classtype:attempted-recon; sid:200026870; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-appli-ob-fr-2022/accueil",nocase; classtype:attempted-recon; sid:200026871; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-appli-obank-fr/accueil",nocase; classtype:attempted-recon; sid:200026872; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-espace/accueil",nocase; classtype:attempted-recon; sid:200026873; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-ob-authentification/accueil",nocase; classtype:attempted-recon; sid:200026874; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-ob-securite/accueil",nocase; classtype:attempted-recon; sid:200026875; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-ob/accueil",nocase; classtype:attempted-recon; sid:200026876; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-obank/accueil",nocase; classtype:attempted-recon; sid:200026877; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serveur-communication-box/accueil",nocase; classtype:attempted-recon; sid:200026878; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/servi-orangbank/accueil",nocase; classtype:attempted-recon; sid:200026879; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/service-apps-obank/accueil",nocase; classtype:attempted-recon; sid:200026880; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/service-orangebank-fr/accueil",nocase; classtype:attempted-recon; sid:200026881; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/service-orangebank-securi/accueil",nocase; classtype:attempted-recon; sid:200026882; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/service-securite-ob/accueil",nocase; classtype:attempted-recon; sid:200026883; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/servicenewlogin",nocase; classtype:attempted-recon; sid:200026884; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/seuysihofficebtbusinessbrir/bt",nocase; classtype:attempted-recon; sid:200026885; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sgdfgetf/att",nocase; classtype:attempted-recon; sid:200026886; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sharepointofbandhan/",nocase; classtype:attempted-recon; sid:200026887; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/shgeudh/home",nocase; classtype:attempted-recon; sid:200026888; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sitatt/home?authuser=3",nocase; classtype:attempted-recon; sid:200026889; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sitgandii/accueil",nocase; classtype:attempted-recon; sid:200026890; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ski03/strona-g%c5%82%c3%b3wna",nocase; classtype:attempted-recon; sid:200026891; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/soeyankandi5/bt-business",nocase; classtype:attempted-recon; sid:200026892; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/szdgsdhgd",nocase; classtype:attempted-recon; sid:200026893; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/szoquwz",nocase; classtype:attempted-recon; sid:200026894; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/taffac1/",nocase; classtype:attempted-recon; sid:200026895; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/tardt-op/",nocase; classtype:attempted-recon; sid:200026896; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/tergelinca",nocase; classtype:attempted-recon; sid:200026897; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/terlenaaja",nocase; classtype:attempted-recon; sid:200026898; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/texaschildneurology/home",nocase; classtype:attempted-recon; sid:200026899; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/tg5oltrd0/information-page-business",nocase; classtype:attempted-recon; sid:200026900; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/thenewstartpage2021",nocase; classtype:attempted-recon; sid:200026901; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/theservvvvvvv11ajw2/home",nocase; classtype:attempted-recon; sid:200026902; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/titat6867gghm00/%d8%a7%d9%84%d8%b5%d9%81%d8%ad%d8%a9-%d8%a7%d9%84%d8%b1%d8%a6%d9%8a%d8%b3%d9%8a%d8%a9",nocase; classtype:attempted-recon; sid:200026903; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/tq4rdkn8/security-page-info",nocase; classtype:attempted-recon; sid:200026904; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/tsaftez1/information-page-recovery",nocase; classtype:attempted-recon; sid:200026905; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/uiora",nocase; classtype:attempted-recon; sid:200026906; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ukhdggdfgd/accueil",nocase; classtype:attempted-recon; sid:200026907; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/uooh/home",nocase; classtype:attempted-recon; sid:200026908; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/update-allreadypage",nocase; classtype:attempted-recon; sid:200026909; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/updatesecure",nocase; classtype:attempted-recon; sid:200026910; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/updatingnewpage",nocase; classtype:attempted-recon; sid:200026911; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/upgrade-bt/home",nocase; classtype:attempted-recon; sid:200026912; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/usaconnectingcom/att-yahoo",nocase; classtype:attempted-recon; sid:200026913; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/usaoush/accueil",nocase; classtype:attempted-recon; sid:200026914; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/utereue/home",nocase; classtype:attempted-recon; sid:200026915; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/utututttu/home",nocase; classtype:attempted-recon; sid:200026916; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/uuhqv/",nocase; classtype:attempted-recon; sid:200026917; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/uzl2kop/?faacebook.com",nocase; classtype:attempted-recon; sid:200026918; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/v-ob/accueil",nocase; classtype:attempted-recon; sid:200026919; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/venmo-loginusa/",nocase; classtype:attempted-recon; sid:200026920; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/verif-ob/accueil",nocase; classtype:attempted-recon; sid:200026921; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/verificat-mobi-obank/accueil",nocase; classtype:attempted-recon; sid:200026922; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/verificat-mobile-obank/accueil",nocase; classtype:attempted-recon; sid:200026923; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/verificat-orangeb/accueil",nocase; classtype:attempted-recon; sid:200026924; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/verificati-ob/accueil",nocase; classtype:attempted-recon; sid:200026925; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/verifmail03/",nocase; classtype:attempted-recon; sid:200026926; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/vfbjf/btconnect",nocase; classtype:attempted-recon; sid:200026927; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/vfdffktt/home",nocase; classtype:attempted-recon; sid:200026928; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/vghgn/home",nocase; classtype:attempted-recon; sid:200026929; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/viewespaceclient-orange03dml/accueil",nocase; classtype:attempted-recon; sid:200026930; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/viewyournewbill/bt-business-btconnect",nocase; classtype:attempted-recon; sid:200026931; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/viewyourrbilll/home",nocase; classtype:attempted-recon; sid:200026932; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/vjsdhdfidjasi/btconnect",nocase; classtype:attempted-recon; sid:200026933; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/vkjjjerljjarea/home",nocase; classtype:attempted-recon; sid:200026934; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/voipnotevocale/accueil",nocase; classtype:attempted-recon; sid:200026935; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/votre0101/accueil",nocase; classtype:attempted-recon; sid:200026936; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/votre04/",nocase; classtype:attempted-recon; sid:200026937; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/votre1/",nocase; classtype:attempted-recon; sid:200026938; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/votre12/accueil",nocase; classtype:attempted-recon; sid:200026939; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/votreone/accueil",nocase; classtype:attempted-recon; sid:200026940; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/walletliveconnect/home",nocase; classtype:attempted-recon; sid:200026941; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/watchingregard/accueil",nocase; classtype:attempted-recon; sid:200026942; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/webespaceclient-ref8/accueil",nocase; classtype:attempted-recon; sid:200026943; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/webmailbt/home",nocase; classtype:attempted-recon; sid:200026944; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/webmailbt23/home",nocase; classtype:attempted-recon; sid:200026945; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/webmailnotification093/home",nocase; classtype:attempted-recon; sid:200026946; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/weebmail123/home",nocase; classtype:attempted-recon; sid:200026947; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/weelcomsign/accueil",nocase; classtype:attempted-recon; sid:200026948; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ws0l",nocase; classtype:attempted-recon; sid:200026949; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/xcccjcdhasks/btconnect",nocase; classtype:attempted-recon; sid:200026950; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/xmicrosoftoficew/home",nocase; classtype:attempted-recon; sid:200026951; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/xvhfefef/bt-business",nocase; classtype:attempted-recon; sid:200026952; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/xxbmicrosoft/home",nocase; classtype:attempted-recon; sid:200026953; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yah000/home",nocase; classtype:attempted-recon; sid:200026954; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yah00mall/home/",nocase; classtype:attempted-recon; sid:200026955; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahoo-mail-verify/home",nocase; classtype:attempted-recon; sid:200026956; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahooend/yahoo",nocase; classtype:attempted-recon; sid:200026957; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahookwhjf/home",nocase; classtype:attempted-recon; sid:200026958; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahoolip/yahoo",nocase; classtype:attempted-recon; sid:200026959; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahoomailactivation",nocase; classtype:attempted-recon; sid:200026960; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahoomailconfirmination/home?authuser=9",nocase; classtype:attempted-recon; sid:200026961; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahoomailingdesk/yahoo-com",nocase; classtype:attempted-recon; sid:200026962; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahoonice/yahoo-com",nocase; classtype:attempted-recon; sid:200026963; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ydkyf/yahoo",nocase; classtype:attempted-recon; sid:200026964; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/zkb-online-3",nocase; classtype:attempted-recon; sid:200026965; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ztt5zazu/home",nocase; classtype:attempted-recon; sid:200026966; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"snip.ly",nocase; http_uri; content:"/hizq5g?=session",nocase; classtype:attempted-recon; sid:200026967; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solatresont.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200026968; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solucionesachgt.com",nocase; http_uri; content:"/info.html",nocase; classtype:attempted-recon; sid:200026969; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soufritont.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200026970; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparka-kundegeschaft.com",nocase; http_uri; content:"/o2nl1xjbci",nocase; classtype:attempted-recon; sid:200026971; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparka-kundekredit.com",nocase; http_uri; content:"/jwcyvrwjye",nocase; classtype:attempted-recon; sid:200026972; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparka-sparen-leicht.com",nocase; http_uri; content:"/5qntkemqip",nocase; classtype:attempted-recon; sid:200026973; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"springfieldsd19-my.sharepoint.com",nocase; http_uri; content:"/:b:/g/personal/joni_balli_springfield_k12_or_us/eql-lhqmbk9dqecdkkbyookbz0vsc-sscfnnsqgnr2ttda?e=4%3afn0bm6&amp\;at=9",nocase; classtype:attempted-recon; sid:200026974; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steinercoza-my.sharepoint.com",nocase; http_uri; content:"/:b:/g/personal/mandyb_steiner_co_za/exxq1passetnrojoe83fzboboxufoggwb7uvmyfqbionla?e=4:su8jhq&amp\;at=9",nocase; classtype:attempted-recon; sid:200026975; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steveporterentertainment.com",nocase; http_uri; content:"/wp-includes/simplepie/absa2022/betv/index.php",nocase; classtype:attempted-recon; sid:200026976; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stolizaparketa.ru",nocase; http_uri; content:"/wp-content/themes/twentyfifteen/css/read/chinavali/index.php?email=jsmith@imaphost.com",nocase; classtype:attempted-recon; sid:200026977; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/1lordman1man3/kelmanco.html#email=info@domain.tld",nocase; classtype:attempted-recon; sid:200026978; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/1lordman1man3/oscman.html",nocase; classtype:attempted-recon; sid:200026979; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/1lordman1man3/oscman.html#email=info@domain.tld",nocase; classtype:attempted-recon; sid:200026980; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/1lordman1man3/oscman2.html#email=info@domain.tld",nocase; classtype:attempted-recon; sid:200026981; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/1lordman1man3/oscman2.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200026982; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/acc03lzzl4m3izm03iauserpowa.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200026983; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/algebraic-pact-316913.appspot.com/index.html#jbell@legalshield.com",nocase; classtype:attempted-recon; sid:200026984; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/anaagc040gdyacgd0dyuser.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200026985; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/ciat3tdtttd53c3e5userp.appspot.com/index.html#jr@legalshield.com",nocase; classtype:attempted-recon; sid:200026986; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/ciat3tdtttd53c3e5userp.appspot.com/index.html#paul@legalshield.com",nocase; classtype:attempted-recon; sid:200026987; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/clientid4dunptjlryzrift3nrlomi160gqntzgznajujcnbszq8w/index.htm",nocase; classtype:attempted-recon; sid:200026988; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/cmc111/cdo-nwst1.html#helpdesk@widomaker.com",nocase; classtype:attempted-recon; sid:200026989; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/cmc111/chaidon.html#a@b.com",nocase; classtype:attempted-recon; sid:200026990; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/dhngw6p6rwrwnuv6vnuse.appspot.com/index.html#brianvillacarlos@legalshieldcorp.com",nocase; classtype:attempted-recon; sid:200026991; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/g58t3e588ddgmdeddauth.appspot.com/index.html#jim-shelvy@legalshield.com",nocase; classtype:attempted-recon; sid:200026992; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/gu1r0utjruhjkukrxhauser.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200026993; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/https3a2f2fofficeuser2fowa2fresourceopenidmsdclientid727c9d/index.html?authuser=0",nocase; classtype:attempted-recon; sid:200026994; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/indettn/oscman2.html#cert@soc.tdc.dk",nocase; classtype:attempted-recon; sid:200026995; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/indettn/pdflmanco.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200026996; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/indettn/zdewaman.html#example@example.com",nocase; classtype:attempted-recon; sid:200026997; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/kkkqkl633qn6kq3lqssiiddnenen.appspot.com/index.html#jbell@legalshield.com",nocase; classtype:attempted-recon; sid:200026998; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/kkkqkl633qn6kq3lqssiiddnenen.appspot.com/index.html#t.voit@legalshield.com",nocase; classtype:attempted-recon; sid:200026999; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/",nocase; classtype:attempted-recon; sid:200027000; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/index.html#martin.manasek@ruk.cuni.cz",nocase; classtype:attempted-recon; sid:200027001; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/logonservices8g7gs65gs9bs66vds7bd9nd/index.html",nocase; classtype:attempted-recon; sid:200027002; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/lttna/zkele1.html#acctbilling@widomaker.com",nocase; classtype:attempted-recon; sid:200027003; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/lttna/zoscman414.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200027004; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/aliexpressautoindex.html#dan@danaxtell.com",nocase; classtype:attempted-recon; sid:200027005; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/index.html#a@b.com",nocase; classtype:attempted-recon; sid:200027006; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/kayindex.html#eimaste@stinpriza.org",nocase; classtype:attempted-recon; sid:200027007; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/myautoindex.html#example@example.com",nocase; classtype:attempted-recon; sid:200027008; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/myofficeindex.html#@yorku.ca",nocase; classtype:attempted-recon; sid:200027009; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/myowngeneral.html#eimaste@stinpriza.org",nocase; classtype:attempted-recon; sid:200027010; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/newkaraindex.html#a@b.com",nocase; classtype:attempted-recon; sid:200027011; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/newmineindex.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200027012; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/webappindex.html#example@example.com",nocase; classtype:attempted-recon; sid:200027013; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/owuddqd9dqqdddq9qd0caerq.appspot.com/index.html#stevewilliamson@legalshield.com",nocase; classtype:attempted-recon; sid:200027014; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/projerroro0h5j5ro0jrrj.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200027015; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/q90qqqar22r229r292euser.appspot.com/index.html",nocase; classtype:attempted-recon; sid:200027016; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/q90qqqar22r229r292euser.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200027017; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/qaqonqfaqvq0fni33q0x.appspot.com/index.html????dddd",nocase; classtype:attempted-recon; sid:200027018; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/qaqonqfaqvq0fni33q0x.appspot.com/index.html???v",nocase; classtype:attempted-recon; sid:200027019; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/riltool/mrkautoindex.html#a@b.com",nocase; classtype:attempted-recon; sid:200027020; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/rrdar99rt9qraraq99euser.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200027021; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/s0pts0apttxpp00atarrauth.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200027022; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/sqlseiceteroeswalesuserw.appspot.com/index.html?dd9uj&amp\;rip=1&amp\;nojavascript=1&amp\;ifkv=au9nccwgqgxybveyj_rmt1ijh5qqlfd7xhs9ssn0ocwja5n3jm1gnfvdcuhslngz3y67_oax8ufr&amp\;followup=https://storage.cloud.google.com/sqlseiceteroeswalesuserw.appspot.com/index.html?dd9uj&amp\;service=cds",nocase; classtype:attempted-recon; sid:200027023; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/staging.maintainancecomponeta.appspot.com/fcocnew.html",nocase; classtype:attempted-recon; sid:200027024; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/staging.maintainancecomponeta.appspot.com/nvhdjgtpl8txagtoccpyscuekxctc7j3kpg5bbugwqv0kemeas313lqehufuifcl6el9vtvomhrfbjbpxbg6qrnsg5sz3dyaiqor%2c%2520ffx6khej2lavfftroaizcq99hjdn3f4hs6gdeg2qodfyhobl8zonx6lez2dafyafc6spylufytfvuzn1jsioh4u6xpsbsqxqgh.html#icann@tecnocratica.net",nocase; classtype:attempted-recon; sid:200027025; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/staging.maintainancecomponeta.appspot.com/sydlasgendomain.html#winnie@soupro.com",nocase; classtype:attempted-recon; sid:200027026; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/tilittjkilot/kakaaautoindex.html#a@b.com",nocase; classtype:attempted-recon; sid:200027027; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/ttn5/raja.html#a@b.com",nocase; classtype:attempted-recon; sid:200027028; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/ttn5/raja.html#william@nabaza.com",nocase; classtype:attempted-recon; sid:200027029; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/ttn5/raja2.html#a@b.com",nocase; classtype:attempted-recon; sid:200027030; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/ttn5/udunwa.html",nocase; classtype:attempted-recon; sid:200027031; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/user517497679326978.appspot.com/index.html",nocase; classtype:attempted-recon; sid:200027032; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/uth0uax3t3uh30ttna0nnuser.appspot.com/index.html#jbell@legalshield.com",nocase; classtype:attempted-recon; sid:200027033; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/yyw77ywnn68weyew6euserq.appspot.com/index.html#rosalefua@legalshield.com",nocase; classtype:attempted-recon; sid:200027034; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/1827435283/1827435283.html",nocase; classtype:attempted-recon; sid:200027035; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/anjumaa0059.appspot.com/indsadadex.html",nocase; classtype:attempted-recon; sid:200027036; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/anjumaa0059.appspot.com/indsadadex.html#alfredo@tecnocratica.net",nocase; classtype:attempted-recon; sid:200027037; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bbss-urltest-public/docomo_20210726_01.html",nocase; classtype:attempted-recon; sid:200027038; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bbss-urltest-public/docomo_20210910_01.html",nocase; classtype:attempted-recon; sid:200027039; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/brand.html#cl/13669_md/1/788/1401/22/1025434",nocase; classtype:attempted-recon; sid:200027040; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/brand.html#cl/13695_md/1/788/1401/109/376564",nocase; classtype:attempted-recon; sid:200027041; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/brand.html#un/13664_md/1/455/1401/112/814109",nocase; classtype:attempted-recon; sid:200027042; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/brand.html#un/13695_md/1/788/1401/25/339407",nocase; classtype:attempted-recon; sid:200027043; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/linkqs.html#cl/29040_md/1/4631/3798/112/984664",nocase; classtype:attempted-recon; sid:200027044; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/linkqs.html#cl/32440_md/1/4628/3798/112/984664",nocase; classtype:attempted-recon; sid:200027045; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/linkqs.html#cl/32621_md/1/4628/3798/112/984664",nocase; classtype:attempted-recon; sid:200027046; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/linkqs.html#oop/29237_md/1/4629/3798/112/984664",nocase; classtype:attempted-recon; sid:200027047; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/linkqs.html#oop/29627_md/1/4629/3798/112/984664",nocase; classtype:attempted-recon; sid:200027048; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/kekvmftbijqr/qarqoiskwcbx.html#ezacvbnkpm?cbbbbcccs2ptcxvckcdcc5csc3pjpckzfcbbbbc",nocase; classtype:attempted-recon; sid:200027049; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/onlineupdate/vendors/to2.htm",nocase; classtype:attempted-recon; sid:200027050; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/pemotion/tixrin.html#/ytk3zstywfhgqtrevnj2amjnsuj2y01athbtukdvaxvdl2faem9wk0c5befnwerjm3rgqnbnzuxqwxk5c3hvuexjd1zud0twm0r0wk4xukltzutwdwvrakx1zwfdbfm5eeirwvgzdjlovg89",nocase; classtype:attempted-recon; sid:200027051; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/reaganstarkyjs/fqh9haa.html#tizioebsr.6x4ivkd4em5v9fgqt?f1tdqwcc4vybcxfhvcdcnvcyc45jphdc7cbbb4p",nocase; classtype:attempted-recon; sid:200027052; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/srvrs-quarantine-update.appspot.com/index.html?email=",nocase; classtype:attempted-recon; sid:200027053; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/sstoragert/linkqs.html#cl/19939_md/1/4441/3808/112/984664",nocase; classtype:attempted-recon; sid:200027054; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/sstoragert/linkqs.html#un/19995_md/1/4542/3682/112/984664",nocase; classtype:attempted-recon; sid:200027055; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/teampass/ha231120/hrf2zsdf/newb.html#2243022fe5715752yo615523864ez9739qk24hnr139714jz",nocase; classtype:attempted-recon; sid:200027056; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/uvyzcsiggb.appspot.com/pduqg.html",nocase; classtype:attempted-recon; sid:200027057; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/wjscsfikph.appspot.com/twava.html",nocase; classtype:attempted-recon; sid:200027058; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession19/index.html",nocase; classtype:attempted-recon; sid:200027059; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession20/index.html",nocase; classtype:attempted-recon; sid:200027060; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession21/index.html",nocase; classtype:attempted-recon; sid:200027061; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession22/index.html",nocase; classtype:attempted-recon; sid:200027062; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession22/index.html#corinne@zilch.nl",nocase; classtype:attempted-recon; sid:200027063; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession23/index.html",nocase; classtype:attempted-recon; sid:200027064; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/008009aa-0c78-42dc-a70d-c23181f54038-bucket/validatesession24/index.html",nocase; classtype:attempted-recon; sid:200027065; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/01f351b7-747e-4d95-bcab-020470ef88a7-bucket/emailupdated9/index.html",nocase; classtype:attempted-recon; sid:200027066; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/23e7db2b-a852-4647-8f5c-9008f418a3be-bucket/updateemail10/index.html",nocase; classtype:attempted-recon; sid:200027067; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/23e7db2b-a852-4647-8f5c-9008f418a3be-bucket/updateemail6/index.html",nocase; classtype:attempted-recon; sid:200027068; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/2c58bffb-fef3-4187-9e46-fac49f9f1339-bucket/mailupdatesecure10/index.html",nocase; classtype:attempted-recon; sid:200027069; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4cabb99d-a1fe-4a06-88a6-cdb2beaa839a-bucket/emailupdated1/index.html",nocase; classtype:attempted-recon; sid:200027070; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4cabb99d-a1fe-4a06-88a6-cdb2beaa839a-bucket/emailupdated2/index.html",nocase; classtype:attempted-recon; sid:200027071; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4cabb99d-a1fe-4a06-88a6-cdb2beaa839a-bucket/emailupdated3/index.html",nocase; classtype:attempted-recon; sid:200027072; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4cabb99d-a1fe-4a06-88a6-cdb2beaa839a-bucket/emailupdated4/index.html",nocase; classtype:attempted-recon; sid:200027073; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/6fb54de1-0ac2-4845-b632-3431d9f3bc49-bucket/updatedomain13/index1.html",nocase; classtype:attempted-recon; sid:200027074; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/6fb54de1-0ac2-4845-b632-3431d9f3bc49-bucket/updatedomain14/index4.html#user@domainname.com",nocase; classtype:attempted-recon; sid:200027075; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/703cdd38-ed1d-44d2-a01d-fbbb1751869b-bucket/emailupdate18/index.html",nocase; classtype:attempted-recon; sid:200027076; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7cea615f-8226-40a0-a152-8bc2ce0b6d23-bucket/updateemail1/index.html",nocase; classtype:attempted-recon; sid:200027077; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7cea615f-8226-40a0-a152-8bc2ce0b6d23-bucket/updateemail4/index.html",nocase; classtype:attempted-recon; sid:200027078; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7cea615f-8226-40a0-a152-8bc2ce0b6d23-bucket/updateemail5/index.html",nocase; classtype:attempted-recon; sid:200027079; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7d7d771f-3ad8-4bec-89e3-0b9a7d63a867-bucket/updateemail11/index.html",nocase; classtype:attempted-recon; sid:200027080; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7d7d771f-3ad8-4bec-89e3-0b9a7d63a867-bucket/updateemail12/index.html",nocase; classtype:attempted-recon; sid:200027081; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7d7d771f-3ad8-4bec-89e3-0b9a7d63a867-bucket/updateemail15/index.html",nocase; classtype:attempted-recon; sid:200027082; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig1/index.html",nocase; classtype:attempted-recon; sid:200027083; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig2/index.html",nocase; classtype:attempted-recon; sid:200027084; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig3/index.html",nocase; classtype:attempted-recon; sid:200027085; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig4/index.html",nocase; classtype:attempted-recon; sid:200027086; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig4/index.html#orders@kohyo.nl",nocase; classtype:attempted-recon; sid:200027087; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig5/index.html",nocase; classtype:attempted-recon; sid:200027088; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7fa09544-72de-42d4-976f-3024cde6c69e-bucket/hostconfig6/index.html",nocase; classtype:attempted-recon; sid:200027089; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/843ddc8e-7812-425d-8786-ff9f92019e5d-bucket/2/index.html#a@b.com",nocase; classtype:attempted-recon; sid:200027090; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost1/index.html",nocase; classtype:attempted-recon; sid:200027091; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost2/index.html",nocase; classtype:attempted-recon; sid:200027092; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost3/index.html",nocase; classtype:attempted-recon; sid:200027093; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost4/index.html",nocase; classtype:attempted-recon; sid:200027094; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost5/index.html",nocase; classtype:attempted-recon; sid:200027095; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/8f2fa405-3ce4-4605-8deb-082636751e2b-bucket/webhost6/index.html",nocase; classtype:attempted-recon; sid:200027096; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/9a535aba-632d-435f-a97b-f6d688263871-bucket/emailupdated11/index.html",nocase; classtype:attempted-recon; sid:200027097; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail1/index.html",nocase; classtype:attempted-recon; sid:200027098; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail2/index.html",nocase; classtype:attempted-recon; sid:200027099; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail3/index.html",nocase; classtype:attempted-recon; sid:200027100; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail4/index.html",nocase; classtype:attempted-recon; sid:200027101; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail5/index.html",nocase; classtype:attempted-recon; sid:200027102; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/9deb5903-5150-491d-bdb8-cd4226f3a733-bucket/hitmail6/index.html",nocase; classtype:attempted-recon; sid:200027103; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a13b5ba6-f9f7-4203-92e4-c62f329c654e-bucket/isjdomsnbckmkrezsxrdtpokjiuhygtfrdeswzxdswedrfdedrtfgyhujikominbuvyctxr/index.html",nocase; classtype:attempted-recon; sid:200027104; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a13b5ba6-f9f7-4203-92e4-c62f329c654e-bucket/isjdomsnbckmkrezsxrdtpokjiuhygtfrdeswzxdswedrfdedrtfgyhujikominbuvyctxr1/index.html",nocase; classtype:attempted-recon; sid:200027105; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a13b5ba6-f9f7-4203-92e4-c62f329c654e-bucket/isjdomsnbckmkrezsxrdtpokjiuhygtfrdeswzxdswedrfdedrtfgyhujikominbuvyctxr2/index.html",nocase; classtype:attempted-recon; sid:200027106; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a13b5ba6-f9f7-4203-92e4-c62f329c654e-bucket/isjdomsnbckmkrezsxrdtpokjiuhygtfrdeswzxdswedrfdedrtfgyhujikominbuvyctxr3/index.html",nocase; classtype:attempted-recon; sid:200027107; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a13b5ba6-f9f7-4203-92e4-c62f329c654e-bucket/isjdomsnbckmkrezsxrdtpokjiuhygtfrdeswzxdswedrfdedrtfgyhujikominbuvyctxr5/index.html",nocase; classtype:attempted-recon; sid:200027108; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1f1764f-8d6c-4472-9af3-cb93bb5ab861-bucket/updatedomain21/index1.html",nocase; classtype:attempted-recon; sid:200027109; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1f1764f-8d6c-4472-9af3-cb93bb5ab861-bucket/updatedomain22/index2.html",nocase; classtype:attempted-recon; sid:200027110; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1f1764f-8d6c-4472-9af3-cb93bb5ab861-bucket/updatedomain23/index3.html",nocase; classtype:attempted-recon; sid:200027111; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1f1764f-8d6c-4472-9af3-cb93bb5ab861-bucket/updatedomain24/index4.html",nocase; classtype:attempted-recon; sid:200027112; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1f1764f-8d6c-4472-9af3-cb93bb5ab861-bucket/updatedomain25/index5.html",nocase; classtype:attempted-recon; sid:200027113; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/bd633079-2fe0-4042-9ced-d79e3f87dfe9-bucket/mailupdatesecure26/index.html",nocase; classtype:attempted-recon; sid:200027114; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/d1a44a1b-6d28-4037-ba19-f531142e05a1-bucket/01/index%20(2)%20(2).html",nocase; classtype:attempted-recon; sid:200027115; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/d9f360ab-4d85-4485-8100-62d476bce03e-bucket/index.html",nocase; classtype:attempted-recon; sid:200027116; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle1/index.html",nocase; classtype:attempted-recon; sid:200027117; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle2/index.html",nocase; classtype:attempted-recon; sid:200027118; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle3/index.html",nocase; classtype:attempted-recon; sid:200027119; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle4/index.html",nocase; classtype:attempted-recon; sid:200027120; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle5/index.html",nocase; classtype:attempted-recon; sid:200027121; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/d9faca97-3ef4-4f19-bdb7-744644982c59-bucket/webswindle6/index.html",nocase; classtype:attempted-recon; sid:200027122; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/dd0fbd66-95b6-47a9-9648-0df7c81ffc5f-bucket/redx.html#elektra@debeij.nl",nocase; classtype:attempted-recon; sid:200027123; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail1/index.html",nocase; classtype:attempted-recon; sid:200027124; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail2/index.html",nocase; classtype:attempted-recon; sid:200027125; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail3/index.html",nocase; classtype:attempted-recon; sid:200027126; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail4/index.html",nocase; classtype:attempted-recon; sid:200027127; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail5/index.html",nocase; classtype:attempted-recon; sid:200027128; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e3dd30bb-a121-4492-aaed-440a81a72c07-bucket/verifymail6/index.html",nocase; classtype:attempted-recon; sid:200027129; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub1/index.html",nocase; classtype:attempted-recon; sid:200027130; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub2/index.html",nocase; classtype:attempted-recon; sid:200027131; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub3/index.html",nocase; classtype:attempted-recon; sid:200027132; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub4/index.html",nocase; classtype:attempted-recon; sid:200027133; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub5/index.html",nocase; classtype:attempted-recon; sid:200027134; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e89163cb-39d5-41dd-a32d-1338546aa873-bucket/webhub6/index.html",nocase; classtype:attempted-recon; sid:200027135; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/f1e747e4-2191-4882-bc0f-5f96e3778913-bucket/configresolve3/index.html#info@mup.cz",nocase; classtype:attempted-recon; sid:200027136; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/fb264499-4aa6-44f3-99bd-bfb7a67d953b-bucket/ftt/upgrade.html#x@x.com",nocase; classtype:attempted-recon; sid:200027137; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"subsmartlink09.eventlink.to",nocase; http_uri; content:"/hka5subdomain0434995orfjfy994",nocase; classtype:attempted-recon; sid:200027138; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"superpark-my.sharepoint.com",nocase; http_uri; content:"/:x:/r/personal/adrian_ramos_superpark_com_hk/_layouts/15/wopiframe.aspx?guestaccesstoken=vofjngnui%2fslbameorlq62qlg8mcdnpo1dizu6i%2bc1m%3d&amp\;docid=1_124bbb2f682ca4c7daba6cec6ee34dfb9&amp\;wdformid=%7ba85c8abe%2d68be%2d43dd%2d91f3%2db397386186be%7d&amp\;action=formsubmit",nocase; classtype:attempted-recon; sid:200027139; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"superstep.org",nocase; http_uri; content:"/airdrop?ref=ylbejb",nocase; classtype:attempted-recon; sid:200027140; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supersurvey.com",nocase; http_uri; content:"/q09rqelmo",nocase; classtype:attempted-recon; sid:200027141; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supersurvey.com",nocase; http_uri; content:"/qbyiejt9a",nocase; classtype:attempted-recon; sid:200027142; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supersurvey.com",nocase; http_uri; content:"/qexi1lubv",nocase; classtype:attempted-recon; sid:200027143; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supersurvey.com",nocase; http_uri; content:"/qgk1qwj5f",nocase; classtype:attempted-recon; sid:200027144; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supersurvey.com",nocase; http_uri; content:"/qjv3dner9",nocase; classtype:attempted-recon; sid:200027145; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supersurvey.com",nocase; http_uri; content:"/qjvjd6g09",nocase; classtype:attempted-recon; sid:200027146; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supersurvey.com",nocase; http_uri; content:"/qmh0hf7bi",nocase; classtype:attempted-recon; sid:200027147; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supersurvey.com",nocase; http_uri; content:"/qqdlmf4x6",nocase; classtype:attempted-recon; sid:200027148; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supersurvey.com",nocase; http_uri; content:"/qtpjj65k7",nocase; classtype:attempted-recon; sid:200027149; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supersurvey.com",nocase; http_uri; content:"/qwcgvxtqk",nocase; classtype:attempted-recon; sid:200027150; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supertechconsultant.com",nocase; http_uri; content:"/bgdocusign-4d22/",nocase; classtype:attempted-recon; sid:200027151; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supplierss.com",nocase; http_uri; content:"/millennium_management_llc_e1780935.html",nocase; classtype:attempted-recon; sid:200027152; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-chase-help.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200027153; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surfcitystillworks.mab-development.com",nocase; http_uri; content:"/absa2022/betv/index.php",nocase; classtype:attempted-recon; sid:200027154; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surl.li",nocase; http_uri; content:"/ckbdk?jfqcs",nocase; classtype:attempted-recon; sid:200027155; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surl.li",nocase; http_uri; content:"/ckbdk?tnjem",nocase; classtype:attempted-recon; sid:200027156; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surl.li",nocase; http_uri; content:"/ckbdk?wtkpo",nocase; classtype:attempted-recon; sid:200027157; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surl.li",nocase; http_uri; content:"/ckbgr?zkvync",nocase; classtype:attempted-recon; sid:200027158; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surl.li",nocase; http_uri; content:"/ckbih?gqdss",nocase; classtype:attempted-recon; sid:200027159; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surl.li",nocase; http_uri; content:"/ckbjh?jupzn",nocase; classtype:attempted-recon; sid:200027160; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surl.li",nocase; http_uri; content:"/ckbjh?unhiep",nocase; classtype:attempted-recon; sid:200027161; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surl.li",nocase; http_uri; content:"/ckmuz?erxji",nocase; classtype:attempted-recon; sid:200027162; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surl.li",nocase; http_uri; content:"/ckmuz?nngxs",nocase; classtype:attempted-recon; sid:200027163; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surl.li",nocase; http_uri; content:"/ckmuz?sesxxad",nocase; classtype:attempted-recon; sid:200027164; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surl.li",nocase; http_uri; content:"/ckmuz?xfcgxy",nocase; classtype:attempted-recon; sid:200027165; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"survey.zohopublic.com",nocase; http_uri; content:"/zs/ffbunc",nocase; classtype:attempted-recon; sid:200027166; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surveyheart.com",nocase; http_uri; content:"/form/608bca7586919c70a2066ef7",nocase; classtype:attempted-recon; sid:200027167; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surveyheart.com",nocase; http_uri; content:"/form/60fff0e60888042acd81382f",nocase; classtype:attempted-recon; sid:200027168; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surveyheart.com",nocase; http_uri; content:"/form/621b14f5c65e8f2fdc0ec20c",nocase; classtype:attempted-recon; sid:200027169; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surveyheart.com",nocase; http_uri; content:"/form/622b8c8ed898226fb3ed9404",nocase; classtype:attempted-recon; sid:200027170; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surveyheart.com",nocase; http_uri; content:"/form/624fd15f71d5cc4316abcfb4",nocase; classtype:attempted-recon; sid:200027171; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surveyheart.com",nocase; http_uri; content:"/form/6255d8c288a46f5efbbc781c",nocase; classtype:attempted-recon; sid:200027172; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"szsmartest.com",nocase; http_uri; content:"/.cha.htm?feeccf00ec7600bcf71c",nocase; classtype:attempted-recon; sid:200027173; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/7nvaa7gshn?trackingid=gvnj958o&signature=newsletter",nocase; classtype:attempted-recon; sid:200027174; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/7nvaa7gshn?trackingid=iu65vdbt&signature=newsletter",nocase; classtype:attempted-recon; sid:200027175; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/8kuqorubt4?signature=newsletter&amp\;trackingid=qj0y6ihhlutkjd3fwk0gxurjedhgfoe1",nocase; classtype:attempted-recon; sid:200027176; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/9ooxxstzmb?amp=1?trackingid=aeqsrw06&signature=newsletter",nocase; classtype:attempted-recon; sid:200027177; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/almyiprdy1",nocase; classtype:attempted-recon; sid:200027178; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/fy2lasfqae?trackingid=4zhypwnm&signature=newsletter",nocase; classtype:attempted-recon; sid:200027179; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/fy2lasfqae?trackingid=sficgo6n&signature=newsletter",nocase; classtype:attempted-recon; sid:200027180; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/fy2lasfqae?trackingid=soiybkrq&signature=newsletter",nocase; classtype:attempted-recon; sid:200027181; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/hklifuye7q?signature=newsletter&amp\;amp\;trackingid=v2izthgeggs2ontblne93wojyanti2dz",nocase; classtype:attempted-recon; sid:200027182; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/j6la6tjeil?signature=newsletter&amp\;trackingid=ikxy5w2prwakarovqzyjf5lsipf1elqt",nocase; classtype:attempted-recon; sid:200027183; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/jcyrtlrlqf?trackingid=dikwswiz&signature=newsletter",nocase; classtype:attempted-recon; sid:200027184; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/k78cpcjb9y?https://webmail.spectrum.net/mail",nocase; classtype:attempted-recon; sid:200027185; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/lw5kd2y1yg",nocase; classtype:attempted-recon; sid:200027186; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/nnracfdpqz?v=kpdqhnid-d2?trackingid=ub8f4520&signature=newsletter",nocase; classtype:attempted-recon; sid:200027187; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/nnracfdpqz?v=leovdeob-hu?trackingid=xplu2ju0&signature=newsletter",nocase; classtype:attempted-recon; sid:200027188; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/nnracfdpqz?v=vrllwvpk-78?trackingid=cnr8reb5&signature=newsletter",nocase; classtype:attempted-recon; sid:200027189; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/nnracfdpqz?v=xlp6ftab-dk?trackingid=86sfocz4&signature=newsletter",nocase; classtype:attempted-recon; sid:200027190; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/nnracfdpqz?v=xth3uugp-ly?trackingid=3xaexyou&signature=newsletter",nocase; classtype:attempted-recon; sid:200027191; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/oc8dgzpvag?type=news_sduwftmbmgintfa&amp\;page_id=141",nocase; classtype:attempted-recon; sid:200027192; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/pw7pa4xm5s",nocase; classtype:attempted-recon; sid:200027193; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/rqcv9sn2pt",nocase; classtype:attempted-recon; sid:200027194; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/tlemnhdfgw",nocase; classtype:attempted-recon; sid:200027195; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/uqjhuzcwqg?trackingid=xqyal3bj&signature=newsletter",nocase; classtype:attempted-recon; sid:200027196; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/z3gsth5xgs",nocase; classtype:attempted-recon; sid:200027197; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/zbohex2uqf?amp=1?trackingid=fxfm4ivt&signature=newsletter",nocase; classtype:attempted-recon; sid:200027198; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/zrd6j5rq4u?amp=1",nocase; classtype:attempted-recon; sid:200027199; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.me",nocase; http_uri; content:"/+pg0whvxoqzgzmdg0",nocase; classtype:attempted-recon; sid:200027200; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.me",nocase; http_uri; content:"/franklinscott23",nocase; classtype:attempted-recon; sid:200027201; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.me",nocase; http_uri; content:"/irs_agency",nocase; classtype:attempted-recon; sid:200027202; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.me",nocase; http_uri; content:"/irsagencies",nocase; classtype:attempted-recon; sid:200027203; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.myvisualiq.net",nocase; http_uri; content:"/click_pixel?et=c&amp\;ago=212&amp\;ao=546&amp\;aca=26737887&amp\;si=7192763&amp\;ci=161117887&amp\;pi=317760010&amp\;ad=512366295&amp\;sv1=[keyword_id]&amp\;advt=4470646&amp\;chnl=-7&amp\;vndr=115&amp\;sz=6585&amp\;u=red=https://0g09rebqe8ms76om9oaq8oemd1t066ke0j725els0lpmpclkoh54heg.siasky.net/#test@mmhe.com.my",nocase; classtype:attempted-recon; sid:200027204; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"take.supersurvey.com",nocase; http_uri; content:"/qy0jqu5k7",nocase; classtype:attempted-recon; sid:200027205; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tanksnet.com",nocase; http_uri; content:"/.well-known/webmail.cpanel.net/main/user.access_email/webmail.cpanel.net_usermailbox.sign_in_auth.mail.cpanelmailjspx.user.login.htm",nocase; classtype:attempted-recon; sid:200027206; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"taplink.cc",nocase; http_uri; content:"/yahoooooooo",nocase; classtype:attempted-recon; sid:200027207; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tecsuport.com.br",nocase; http_uri; content:"/files/system32/procesosdeseguridadhb/170.51.165.16679791/agregar/telefono/contacto/logonoperacionservlet.html",nocase; classtype:attempted-recon; sid:200027208; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telenorkandklimsupoort.blogspot.com",nocase; http_uri; content:"/2021/03/blog-post_48.html",nocase; classtype:attempted-recon; sid:200027209; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telhanorte-90.blogspot.com",nocase; http_uri; content:"/?shiny",nocase; classtype:attempted-recon; sid:200027210; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"temporary-url.com",nocase; http_uri; content:"/iframe.php?url=https://gasdealers.in/goprime/index.html",nocase; classtype:attempted-recon; sid:200027211; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tigerhost.com.au",nocase; http_uri; content:"/inter/internode.html",nocase; classtype:attempted-recon; sid:200027212; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.cc",nocase; http_uri; content:"/5cgfd",nocase; classtype:attempted-recon; sid:200027213; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.cc",nocase; http_uri; content:"/owes09",nocase; classtype:attempted-recon; sid:200027214; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.one",nocase; http_uri; content:"/2p9axhk4",nocase; classtype:attempted-recon; sid:200027215; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.one",nocase; http_uri; content:"/correos746",nocase; classtype:attempted-recon; sid:200027216; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.one",nocase; http_uri; content:"/ing4678",nocase; classtype:attempted-recon; sid:200027217; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.one",nocase; http_uri; content:"/ing5373",nocase; classtype:attempted-recon; sid:200027218; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.one",nocase; http_uri; content:"/ing6388",nocase; classtype:attempted-recon; sid:200027219; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.one",nocase; http_uri; content:"/ing7292",nocase; classtype:attempted-recon; sid:200027220; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.one",nocase; http_uri; content:"/ing7326",nocase; classtype:attempted-recon; sid:200027221; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.one",nocase; http_uri; content:"/ing7385",nocase; classtype:attempted-recon; sid:200027222; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.one",nocase; http_uri; content:"/ing7397",nocase; classtype:attempted-recon; sid:200027223; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.one",nocase; http_uri; content:"/ing7398",nocase; classtype:attempted-recon; sid:200027224; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.one",nocase; http_uri; content:"/ing7698",nocase; classtype:attempted-recon; sid:200027225; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.one",nocase; http_uri; content:"/ing8737",nocase; classtype:attempted-recon; sid:200027226; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.one",nocase; http_uri; content:"/ing9374",nocase; classtype:attempted-recon; sid:200027227; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.one",nocase; http_uri; content:"/sicurezza-n26",nocase; classtype:attempted-recon; sid:200027228; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinycc.com",nocase; http_uri; content:"/tiny/custom_domain_redirect/irspay.2.vu/af69n93?mmxxm",nocase; classtype:attempted-recon; sid:200027229; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinycc.com",nocase; http_uri; content:"/tiny/custom_domain_redirect/irspay.2.vu/af69n93?wary",nocase; classtype:attempted-recon; sid:200027230; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/2275zpzj",nocase; classtype:attempted-recon; sid:200027231; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/27chzzj7",nocase; classtype:attempted-recon; sid:200027232; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/2ehrvhv5",nocase; classtype:attempted-recon; sid:200027233; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/37na9ch8",nocase; classtype:attempted-recon; sid:200027234; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/37rddubh",nocase; classtype:attempted-recon; sid:200027235; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/3b295ucm",nocase; classtype:attempted-recon; sid:200027236; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/4fzxt9fm",nocase; classtype:attempted-recon; sid:200027237; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/4hbvuu8c",nocase; classtype:attempted-recon; sid:200027238; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/5baa2hry",nocase; classtype:attempted-recon; sid:200027239; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/a-cadastro-caixa",nocase; classtype:attempted-recon; sid:200027240; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/allertinfoapp",nocase; classtype:attempted-recon; sid:200027241; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/bankinghome",nocase; classtype:attempted-recon; sid:200027242; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/caixa73773",nocase; classtype:attempted-recon; sid:200027243; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/f-yixtnkio2p",nocase; classtype:attempted-recon; sid:200027244; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-form-jrrucn",nocase; classtype:attempted-recon; sid:200027245; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-form-vr06ld3axo",nocase; classtype:attempted-recon; sid:200027246; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-nosckxp",nocase; classtype:attempted-recon; sid:200027247; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-1raku3v",nocase; classtype:attempted-recon; sid:200027248; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-7yipq3",nocase; classtype:attempted-recon; sid:200027249; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-dkynk8j2t",nocase; classtype:attempted-recon; sid:200027250; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-jgwqcwfnjv",nocase; classtype:attempted-recon; sid:200027251; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-mhe0ohp9",nocase; classtype:attempted-recon; sid:200027252; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-nxe9k5ffp",nocase; classtype:attempted-recon; sid:200027253; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-qqp3vta2",nocase; classtype:attempted-recon; sid:200027254; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-rtkhnnwu",nocase; classtype:attempted-recon; sid:200027255; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-vbhhyp",nocase; classtype:attempted-recon; sid:200027256; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-xixqr6i9b",nocase; classtype:attempted-recon; sid:200027257; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/form-192kakcpb",nocase; classtype:attempted-recon; sid:200027258; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/form-2zbuw8hz5",nocase; classtype:attempted-recon; sid:200027259; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/form-btzzqgapz3",nocase; classtype:attempted-recon; sid:200027260; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/form-enuzxx8gwv",nocase; classtype:attempted-recon; sid:200027261; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/form-fcyd3v",nocase; classtype:attempted-recon; sid:200027262; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/form-gqnurpcu",nocase; classtype:attempted-recon; sid:200027263; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/form-pep1fe",nocase; classtype:attempted-recon; sid:200027264; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/hcdpp404",nocase; classtype:attempted-recon; sid:200027265; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/hostingo",nocase; classtype:attempted-recon; sid:200027266; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/i69track",nocase; classtype:attempted-recon; sid:200027267; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/issues27scfuru",nocase; classtype:attempted-recon; sid:200027268; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/l4labls0",nocase; classtype:attempted-recon; sid:200027269; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-4hg3l1btr",nocase; classtype:attempted-recon; sid:200027270; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-cf8u3iod7a",nocase; classtype:attempted-recon; sid:200027271; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-dqd86ubhbq",nocase; classtype:attempted-recon; sid:200027272; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-flkzbx1s3f",nocase; classtype:attempted-recon; sid:200027273; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-hijw94ctlf",nocase; classtype:attempted-recon; sid:200027274; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-hqe1qtgfs",nocase; classtype:attempted-recon; sid:200027275; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-kn6b0g",nocase; classtype:attempted-recon; sid:200027276; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-l4delqpl40",nocase; classtype:attempted-recon; sid:200027277; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-lfxes1fttl",nocase; classtype:attempted-recon; sid:200027278; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-odmnerxjsg",nocase; classtype:attempted-recon; sid:200027279; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-osgfshdnaa",nocase; classtype:attempted-recon; sid:200027280; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-srr085p",nocase; classtype:attempted-recon; sid:200027281; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-stowq7oxj",nocase; classtype:attempted-recon; sid:200027282; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-t2zgxdx9",nocase; classtype:attempted-recon; sid:200027283; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-umnwdly",nocase; classtype:attempted-recon; sid:200027284; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-y6ftsfwn",nocase; classtype:attempted-recon; sid:200027285; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-yafbicqxn",nocase; classtype:attempted-recon; sid:200027286; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/mr43ph8w",nocase; classtype:attempted-recon; sid:200027287; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/sicurezzaapplogin",nocase; classtype:attempted-recon; sid:200027288; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/sicurezzacredem",nocase; classtype:attempted-recon; sid:200027289; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/sjsss",nocase; classtype:attempted-recon; sid:200027290; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/unnv7sdd",nocase; classtype:attempted-recon; sid:200027291; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/wj27c5w4",nocase; classtype:attempted-recon; sid:200027292; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/y8dwrs9p",nocase; classtype:attempted-recon; sid:200027293; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/yc24jz87",nocase; classtype:attempted-recon; sid:200027294; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/yc4myaw9",nocase; classtype:attempted-recon; sid:200027295; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/yckn69y2",nocase; classtype:attempted-recon; sid:200027296; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/yckvhx58",nocase; classtype:attempted-recon; sid:200027297; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/ysmzhzfj",nocase; classtype:attempted-recon; sid:200027298; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tlecorp03802.fra1.digitaloceanspaces.com",nocase; http_uri; content:"/indexs%20(8).html",nocase; classtype:attempted-recon; sid:200027299; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tonyrestaurantphuket.com",nocase; http_uri; content:"/a4rt/index.php",nocase; classtype:attempted-recon; sid:200027300; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"toolsandadvice.com",nocase; http_uri; content:"/includes/svrp",nocase; classtype:attempted-recon; sid:200027301; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"toolsandadvice.com",nocase; http_uri; content:"/includes/svrp/",nocase; classtype:attempted-recon; sid:200027302; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tr.cloudmagic.com",nocase; http_uri; content:"/h/v6/link-track/1.0/1612678003989072-e5f6d8cc-499b-ea4f-85f1-8b23ad935661/1612677988/2f5895837f8d3f0a667c6b92ad41f652/8af273ac431e289838c8bf7c490185f3/3fe2530ffaa60580b73b9eec6af02f4d?redirect_uri=http://amazon.com",nocase; classtype:attempted-recon; sid:200027303; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tr.cloudmagic.com",nocase; http_uri; content:"/h/v6/link-track/1.0/1614590779401122-8e06125c-4b23-d643-3068-601cab9bec04/1614590763/2f5895837f8d3f0a667c6b92ad41f652/31367888a66bf6f98973a200c83075bb/3fe2530ffaa60580b73b9eec6af02f4d?redirect_uri=http://amazon.com",nocase; classtype:attempted-recon; sid:200027304; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"track.adform.net",nocase; http_uri; content:"/c/?bn=35405429\;cpdir=https://tmmny.csb.app/.wewrewew.ahr0chm6ly9pbnzlc3rpbmdpbmdvzc5vcmcvqvbjmjq3.yw1izxiuzml0dg9uqhnwyxjrlmnvlm56",nocase; classtype:attempted-recon; sid:200027305; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trk.klclick3.com",nocase; http_uri; content:"/ls/click?upn=rh-2bf9hqggd83zvr8-2f2urpq9jza4nfyepanu7d3q3phc5fuhcmko-2bdnkpb77-2frn0jksb4_12auc2qfc-2fmvanj9w5gz1niyn6w81nfyizixxcjyohcdjetmz8z7ozsg5qrzrqqfo70kk0rjxowq28q5nzx71p4rno1y2borqqazxmt0955ioulj3hotvbzkpo8pa09ilfa4l4xjki0vdirect7fh-2btqojn5nn-2bsvj56b8oj6ytisepl-2fyndoytlygbqfjcsnzj7xrxpcpc2y33v-2brcfmdaa-2fuzaljxshizppw79wtya017swhsi773accxnrksgojupnndhln5rwkqefr00pg-3d-3d",nocase; classtype:attempted-recon; sid:200027306; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trk.klclick3.com",nocase; http_uri; content:"/ls/click?upn=vj3dadlrp-2fcfi22cxv5slmj9bs27v4ur9e-2f6aekkiuju7zruatjxol6lgt5xi6fx6lhwu7l9t0cxeulddiovrbyfpra1wztkgpi63kwkws-2bmvhmxfgmb6yn7jskx-2fu4r03dky7iafgb-2fta6hwqby63ucxfknnix2s1jtelfxd3wiwwlifn0vjgeal5ujbmupx8bbjcxvchr1ok8xfrqfnmy836ctsoh-2flt3d7uovnjooazs9eprx4wedfnmn7-2ffobhap4tt4pl-2f8q2poovn5cgshg-2fbbipi0gmepwr3skurvpjwgiyerch1vtr9yyrov5bbgjn-2fvhfiffsnaqi5bca-3d-3dkqpr_0ivmhd7nsoe2up5tze3op8d-2fsn3ohure6d19gi8qjbwosimpdtamk7y8urnfbq0eurrturkgyz8ptfq84s0oghdjaey4eqygfme-2fornmqugxkvuhwavsrvpuyd6j3ehclftk-2fmhytlzdz4wv4ecss4tpqsttkgejqscggvgnl9s16ulwcz4ssvrqiuim0snvj2i6p8dzv6clywsguhbw5yjht4b08ursgrgxp0j7nmkuf93odmq9xwbxnuqp-2bry65pnu-2frpphtuvgjsa8tolngsbb8jnsy6mjxkfnkxn672ryzlksl-2bcvphralufouhwimybzdacvpo13oxjwigqqcoyv2yfewxdqtphaydrskcereezuvegylv3m76xouvyyowqnmkdh13-2bfz01-2bqnsuw-3d-3d#amfwzxjlekbiyw5jb29wlmnvbq==",nocase; classtype:attempted-recon; sid:200027307; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuntine-resport.com",nocase; http_uri; content:"/81ad8277-2641-4559-9924-3226fff1aeb8?lm_sub=4183&lm_list=gmail_cleaned&lm_shoot_mode=manual&lm_version=8201&lm_id=mlacys97%40gmail.com&lm_age=22%2f08%2f1964",nocase; classtype:attempted-recon; sid:200027308; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u.to",nocase; http_uri; content:"/_sglha",nocase; classtype:attempted-recon; sid:200027309; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u.to",nocase; http_uri; content:"/dtvdha",nocase; classtype:attempted-recon; sid:200027310; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ucmo0-my.sharepoint.com",nocase; http_uri; content:"/:w:/g/personal/jmlee_ucmo_edu/ey4vifgt_7nfmz9xrsc5lpcbyiu2dkrhyz1vcu3pcml_la?e=4%3advzg7b&amp\;at=9",nocase; classtype:attempted-recon; sid:200027311; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unigeol.quip.com",nocase; http_uri; content:"/2jtcaszcsaza/click-here-to-verify-your-email",nocase; classtype:attempted-recon; sid:200027312; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uploads.codesandbox.io",nocase; http_uri; content:"/uploads/user/05f89058-061c-48b2-856d-a88922dc294e/5r8g-index.html",nocase; classtype:attempted-recon; sid:200027313; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"url.dscdut.com",nocase; http_uri; content:"/000",nocase; classtype:attempted-recon; sid:200027314; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"url.dscdut.com",nocase; http_uri; content:"/mail2022",nocase; classtype:attempted-recon; sid:200027315; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"url.dscdut.com",nocase; http_uri; content:"/nudi",nocase; classtype:attempted-recon; sid:200027316; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"url.emailprotection.link",nocase; http_uri; content:"/?byzfzh01a8agnrfkn2qmyujcvyce3awstvjvfvza8k7z-mi7uoyekfwkp0v6uia5gksaqub2jvcrtkxzypflbtm3dvnmhilt5onpcy2165mweqkphha5rbmbyvrk68yts",nocase; classtype:attempted-recon; sid:200027317; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlscan.io",nocase; http_uri; content:"/result/d20ea0a6-903f-46c2-9377-ac533812b1ad/",nocase; classtype:attempted-recon; sid:200027318; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urly.it",nocase; http_uri; content:"/3m_r1",nocase; classtype:attempted-recon; sid:200027319; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urly.it",nocase; http_uri; content:"/3m_y1",nocase; classtype:attempted-recon; sid:200027320; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/ic37",nocase; classtype:attempted-recon; sid:200027321; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/igvb?/page-help-support",nocase; classtype:attempted-recon; sid:200027322; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/igvj?/page-help-support",nocase; classtype:attempted-recon; sid:200027323; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/iqe0",nocase; classtype:attempted-recon; sid:200027324; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlzs.com",nocase; http_uri; content:"/au4zs",nocase; classtype:attempted-recon; sid:200027325; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlzs.com",nocase; http_uri; content:"/g8zxv",nocase; classtype:attempted-recon; sid:200027326; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usnd.to",nocase; http_uri; content:"/lm53",nocase; classtype:attempted-recon; sid:200027327; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/2gfq?facebook_secu%c9%beity_report=",nocase; classtype:attempted-recon; sid:200027328; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/2nitw?security-page?security.id",nocase; classtype:attempted-recon; sid:200027329; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/3q16",nocase; classtype:attempted-recon; sid:200027330; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/6bhed",nocase; classtype:attempted-recon; sid:200027331; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/abqe",nocase; classtype:attempted-recon; sid:200027332; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/bbjiy?team_report_page",nocase; classtype:attempted-recon; sid:200027333; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/d0bv?confirmation_facebook_report",nocase; classtype:attempted-recon; sid:200027334; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/e4ea?team_report_page",nocase; classtype:attempted-recon; sid:200027335; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/es8009210",nocase; classtype:attempted-recon; sid:200027336; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/ghsk",nocase; classtype:attempted-recon; sid:200027337; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/gsig?confirmation_facebook_report",nocase; classtype:attempted-recon; sid:200027338; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/i8wl?security-page?security.id",nocase; classtype:attempted-recon; sid:200027339; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/kvisr?confirmation_facebook_report",nocase; classtype:attempted-recon; sid:200027340; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/kvjh",nocase; classtype:attempted-recon; sid:200027341; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/midb?confirmation_facebook_report",nocase; classtype:attempted-recon; sid:200027342; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/n5j4d",nocase; classtype:attempted-recon; sid:200027343; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/ozsmo",nocase; classtype:attempted-recon; sid:200027344; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/pdjgp",nocase; classtype:attempted-recon; sid:200027345; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/radx?security-page?security.id",nocase; classtype:attempted-recon; sid:200027346; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/s7zj?confirmation_facebook_report",nocase; classtype:attempted-recon; sid:200027347; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/sptq",nocase; classtype:attempted-recon; sid:200027348; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/svdh4?confirmation_facebook_report",nocase; classtype:attempted-recon; sid:200027349; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/vymxy?confirmation_facebook_report",nocase; classtype:attempted-recon; sid:200027350; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/wdhoz?security-page?security.id",nocase; classtype:attempted-recon; sid:200027351; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/xonp?confirmation_facebook_report",nocase; classtype:attempted-recon; sid:200027352; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vatlieutuduong-vn.raq.yoj.mybluehost.me",nocase; http_uri; content:"/lux/nba/webmail-portal-rd337/index.html",nocase; classtype:attempted-recon; sid:200027353; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vbttechnosoft.com",nocase; http_uri; content:"/verification/",nocase; classtype:attempted-recon; sid:200027354; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verify-revolut.com",nocase; http_uri; content:"/login/?rsqmafxawm5o9&authstate=rsqmafxawm5o9",nocase; classtype:attempted-recon; sid:200027355; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viamobte.blogspot.com",nocase; http_uri; content:"/2021/03/blog-post.html",nocase; classtype:attempted-recon; sid:200027356; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.fmstks.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027357; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viasecviioenrem.vsosirvsismscvoiei.piokus.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027358; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.fmstks.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027359; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesciooiwzxrem.vsosirvsenismcvoiei.piokus.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027360; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.fmstks.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027361; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviioenrem.vsosirvsismsivi.piokus.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027362; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.fmstks.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027363; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseescviiooiwzxrem.vsosirvsenismsivi.piokus.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027364; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.fmstks.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027365; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscoiwzxrem.vsosieovensismsivi.piokus.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027366; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.fmstks.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027367; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioerscznrem.vsosieovsismsivi.piokus.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027368; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.fmstks.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027369; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcviioscoiwzxrem.vsosieovensiscvoievi.piokus.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027370; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.fmstks.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027371; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viaseesxcvoerscznrem.vsosieovsismscvoiei.piokus.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027372; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.fajubu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027373; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.jwfbzu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027374; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.myxbtu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027375; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseeeceic.rveivreaaevesi.retdou.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027376; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.fajubu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027377; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.gelxdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027378; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.jwfbzu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027379; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseevei.cvrieversavesi.myxbtu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027380; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.fajubu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027381; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.gelxdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027382; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.jwfbzu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027383; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.myxbtu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027384; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieececir.evirveiaaevesi.retdou.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027385; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.fajubu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027386; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.gelxdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027387; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.jwfbzu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027388; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.myxbtu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027389; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcresseieveic.rveivresiavesi.retdou.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027390; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027391; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027392; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027393; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027394; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027395; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027396; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027397; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseeeceic.eivreaaevesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027398; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027399; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027400; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027401; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027402; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027403; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027404; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseevei.cveversavesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027405; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027406; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027407; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027408; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027409; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027410; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027411; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieececievirveiaaevesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027412; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027413; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027414; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027415; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027416; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027417; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027418; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027419; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecresseieveic.eivresiavesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027420; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027421; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027422; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027423; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027424; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseeecei.vivraevesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027425; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027426; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027427; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027428; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027429; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseevei.vivervesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027430; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027431; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027432; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027433; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027434; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027435; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027436; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027437; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseieecei.viriaaevesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027438; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027439; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027440; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027441; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027442; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027443; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027444; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvcsecseievei.vivriavesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027445; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.fajubu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027446; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.gelxdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027447; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.jwfbzu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027448; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.myxbtu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027449; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivecic.rveivrseiaveesi.retdou.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027450; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.jwfbzu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027451; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.myxbtu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027452; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseivei.cvrievsresivesi.retdou.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027453; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.fajubu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027454; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.jwfbzu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027455; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.myxbtu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027456; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecseveci.cvrievsreaveesi.retdou.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027457; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.fajubu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027458; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.gelxdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027459; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.jwfbzu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027460; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.myxbtu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027461; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsrecsevei.vcirvesersvesi.retdou.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027462; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027463; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027464; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027465; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027466; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027467; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027468; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceiveci.vivriaveesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027469; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027470; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027471; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027472; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027473; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027474; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027475; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027476; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceivei.vivsrivesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027477; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027478; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027479; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027480; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027481; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027482; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027483; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027484; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecceveci.vivsrveesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027485; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027486; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027487; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027488; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027489; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027490; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027491; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027492; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsseccevei.vivseresi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027493; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027494; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027495; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027496; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027497; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivecic.eivrseiaveesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027498; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027499; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027500; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027501; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027502; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027503; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027504; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027505; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseivei.cvevsresivesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027506; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027507; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027508; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027509; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027510; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027511; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecseveci.cvevsreaveesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027512; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027513; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027514; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027515; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027516; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027517; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvssecrecsevei.vciesersvesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027518; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieanioinceiecure.visorcorcnsvsmeercmsvi.yhzjku.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027519; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieasecivioenre.vsosirvsivmenscevoiei.yhzjku.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027520; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescoiwzxrem.sosieeovevnsenismsivi.yhzjku.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027521; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviioescznrem.vsoieovvesenismsivi.yhzjku.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027522; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscviiosoiwzxrem.vssieoveensvisencvoievi.yhzjku.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027523; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeiscvoersznrem.vsosiovsivesmenscvoiei.yhzjku.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027524; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisiooiwzrem.vsosirvenviseenmcvoiei.yhzjku.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027525; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviioenem.vsosirvvenismesivi.yhzjku.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027526; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieaseeisviiooizxrem.vsosivsveneenismsivi.yhzjku.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027527; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinviaesnsiea.vocasccvoenucveoiei.yhzjku.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027528; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnowzxera.vocacvcoeenensunvi.yhzjku.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027529; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisaoesnsera.vocavscncosuenvi.yhzjku.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027530; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisasnoiwxera.vocascoevnseenucvoiei.yhzjku.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027531; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesncoiwzxera.vcaseoecenvosenucvoiei.yhzjku.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027532; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscoiwzxeravocaseeovceennosunvi.yhzjku.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027533; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaoesnrscziera.voasveoeencosunvi.yhzjku.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027534; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieoinvisxaonsrcziera.vocaeocvoesenucvoiei.yhzjku.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027535; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.fmstks.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027536; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvaoesnsiera.vocasccosucvoiei.piokus.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027537; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.fmstks.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027538; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnoiwzxera.vocasccoensunvi.piokus.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027539; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.fmstks.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027540; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssaoesnsiera.vocasccosunvi.piokus.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027541; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.fmstks.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027542; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssasnoiwzxera.vocasccoensucvoiei.piokus.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027543; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.fmstks.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027544; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnscoiwzxera.vocaseocenosucvoiei.piokus.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027545; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.fmstks.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027546; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscoiwzxera.vocaseocenosunvi.piokus.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027547; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.fmstks.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027548; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaoesnsrscziera.vocaseocosunvi.piokus.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027549; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.fmstks.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027550; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vioinvssxaonsrscziera.vocaseocosucvoiei.piokus.id",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027551; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visecai.vscsaeiso.mzztru.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027552; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseioscai.vscsaieeicso.uqmzwu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027553; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseocai.vscsaeisoc.vpdsgu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027554; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viseoscai.vscsaeeicso.uqmzwu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027555; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.fajubu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027556; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.gelxdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027557; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.jwfbzu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027558; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.myxbtu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027559; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreiseecei.cvrieveiaaevesi.retdou.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027560; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.fajubu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027561; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.gelxdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027562; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.jwfbzu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027563; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.myxbtu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027564; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsreisevei.vcirveesiavesi.retdou.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027565; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.fajubu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027566; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.gelxdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027567; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.jwfbzu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027568; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.myxbtu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027569; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsseceecei.viveaaesi.retdou.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027570; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.fajubu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027571; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.gelxdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027572; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.jwfbzu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027573; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.myxbtu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027574; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecevei.vivesavi.retdou.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027575; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.fajubu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027576; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.gelxdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027577; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.jwfbzu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027578; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.myxbtu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027579; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecieecei.viveievesi.retdou.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027580; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.fajubu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027581; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.gelxdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027582; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.jwfbzu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027583; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.myxbtu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027584; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecievei.vivesiesi.retdou.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027585; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027586; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027587; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027588; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027589; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027590; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesecei.vcieeaaevesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027591; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027592; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027593; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027594; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027595; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027596; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027597; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreesvei.vicvesavesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027598; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027599; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027600; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027601; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027602; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027603; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreiseecei.cveveiaaevesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027604; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027605; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027606; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027607; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027608; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027609; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027610; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcssecreisevei.vcieesiavesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027611; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.fajubu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027612; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.gelxdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027613; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.jwfbzu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027614; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisveci.vcirveseiaveesi.retdou.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027615; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.fajubu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027616; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.gelxdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027617; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.jwfbzu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027618; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.myxbtu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027619; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscreisvei.vicvrseesivesi.retdou.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027620; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027621; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027622; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027623; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027624; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027625; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisveci.vcieseiaveesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027626; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027627; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027628; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027629; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027630; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027631; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027632; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecreisvei.vicveesivesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027633; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.doobbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027634; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027635; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027636; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027637; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027638; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.wetot.company",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027639; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevseci.vicveeaveesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027640; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.exmrhu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027641; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.mjijyu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027642; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.ppcihu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027643; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.ptpcdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027644; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.wdczpu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027645; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsecrevsei.vivcsesvesi.zxpdbu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027646; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsiecaiecsn.viscaieaeeivsei.strvlu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027647; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsieicsn.visaaeivsei.scqglu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027648; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsvecisecsn.viscaseecvsvei.strvlu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027649; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveiasecsn.viscaiescvsvei.zpfdvu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027650; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveiscesn.visacscevsvei.cukfdu.top",nocase; http_uri; content:"/uwbrvz8quj/page1.php",nocase; classtype:attempted-recon; sid:200027651; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?cc_key=&amp\;post=%7brandom_number_5%7d_1&amp\;to=http://18.118.206.123/index.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d",nocase; classtype:attempted-recon; sid:200027652; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=3efeh",nocase; classtype:attempted-recon; sid:200027653; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=dvexh",nocase; classtype:attempted-recon; sid:200027654; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=fhqja",nocase; classtype:attempted-recon; sid:200027655; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=zzbtj",nocase; classtype:attempted-recon; sid:200027656; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.219.14.108/index.php?key=ccugr",nocase; classtype:attempted-recon; sid:200027657; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f35.229.41.22?key=n4jki,email=email@icloud.com&post=11231_1&cc_key",nocase; classtype:attempted-recon; sid:200027658; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2fhumanity06.com%2fwp-content%2fthemes%2fapi.html",nocase; classtype:attempted-recon; sid:200027659; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2firsgov-refundprogram.online%2f%3fverify",nocase; classtype:attempted-recon; sid:200027660; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2frois-zkxzx.run.goorm.io/safe-browser/",nocase; classtype:attempted-recon; sid:200027661; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://168.61.163.101/index.html?key=oppca,email=irs.government@icloud.com&amp\;post=63156_1&amp\;cc_key",nocase; classtype:attempted-recon; sid:200027662; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.1.185.241/index.html?key=oppca,email=trackfinance@irs.gov&post=63156_1&cc_key",nocase; classtype:attempted-recon; sid:200027663; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.109.41.124?key=a0j3o,email=kminella@icloud.com&post=13847_1&cc_key",nocase; classtype:attempted-recon; sid:200027664; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.109.41.124?key=mk9z6,email=lupekerber@yahoo.com&post=82701_1&cc_key",nocase; classtype:attempted-recon; sid:200027665; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.110.189.189?key=e86i8,email=email@icloud.com&post=52917_1&cc_key",nocase; classtype:attempted-recon; sid:200027666; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.110.189.189?key=ujas3,email=email@icloud.com&post=95993_1&cc_key",nocase; classtype:attempted-recon; sid:200027667; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.110.73.46?key=rpgvc,email=email@icloud.com&post=35214_1&cc_key",nocase; classtype:attempted-recon; sid:200027668; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.117.201.219?key=a9anr,email=email@icloud.com&post=67925_1&cc_key",nocase; classtype:attempted-recon; sid:200027669; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.117.201.219?key=a9anr,email=kminella@icloud.com&post=67925_1&cc_key",nocase; classtype:attempted-recon; sid:200027670; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.121.2.22/index.html?key=oppca,email=trackfinance@irs.gov&post=63156_1&cc_key",nocase; classtype:attempted-recon; sid:200027671; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.203.161.161?key=bekja,email=kimberlidismuke13@icloud.com&post=98876_1&cc_key",nocase; classtype:attempted-recon; sid:200027672; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.203.161.161?key=dlqg7,email=email@icloud.com&post=88353_1&cc_key",nocase; classtype:attempted-recon; sid:200027673; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.203.161.161?key=ffiqb,email=email@icloud.com&post=65185_1&cc_key",nocase; classtype:attempted-recon; sid:200027674; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.203.161.161?key=tqayb,emai=email@icloud.com&post=01286_1&cc_key",nocase; classtype:attempted-recon; sid:200027675; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.203.161.161?key=wuhq2,email=mariareyes7826@icloud.com&post=15402_1&cc_key",nocase; classtype:attempted-recon; sid:200027676; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.213.164.95?key=jdlwh",nocase; classtype:attempted-recon; sid:200027677; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.213.46.217?key=bgckvctutk",nocase; classtype:attempted-recon; sid:200027678; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.213.49.9/?key=voqj5,email=durincat8@icloud.com&post=19202_1&cc_key",nocase; classtype:attempted-recon; sid:200027679; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.222.3.107?key=rtudqaeeba",nocase; classtype:attempted-recon; sid:200027680; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.222.3.107?key=skfefvlukk",nocase; classtype:attempted-recon; sid:200027681; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.222.35.247?key=iguhqpukhn",nocase; classtype:attempted-recon; sid:200027682; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.229.141.100/index.html?key=oppca,email=irs.government@icloud.com&amp\;post=63156_1&amp\;cc_key",nocase; classtype:attempted-recon; sid:200027683; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.230.50.243?key=uyffw,email=email@sbcglobal.net&post=87074_1&cc_key",nocase; classtype:attempted-recon; sid:200027684; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.239.152.26/index.html?key=oppca,email=irs.government@icloud.com&post=63156_1&cc_key",nocase; classtype:attempted-recon; sid:200027685; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.39.209.90?key=hcirs,email=email@icloud.com&post=94243_1&cc_key",nocase; classtype:attempted-recon; sid:200027686; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.40.64.158?key=0uqyr,email=email@yahoo.com&post=94707_1&cc_key",nocase; classtype:attempted-recon; sid:200027687; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.40.64.158?key=sbjxm,email=email@yahoo.com&post=31496_1&cc_key",nocase; classtype:attempted-recon; sid:200027688; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.68.105.113?key=gojjs,email=email@icloud.com&post=65211_1&cc_key",nocase; classtype:attempted-recon; sid:200027689; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.68.105.113?key=hiumv,email=golder.cm@icloud.com&post=58507_1&cc_key",nocase; classtype:attempted-recon; sid:200027690; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.68.105.113?key=ihwbn,email=email@icloud.com&post=01341_1&cc_key",nocase; classtype:attempted-recon; sid:200027691; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.68.105.113?key=qba0d,email=email@icloud.com&post=85453_1&cc_key",nocase; classtype:attempted-recon; sid:200027692; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.70.19.11?key=ejkco,email=dlighted@icloud.com&post=16970_1&cc_key",nocase; classtype:attempted-recon; sid:200027693; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.70.19.11?key=nn7jd,email=email@icloud.com&post=71936_1&cc_key",nocase; classtype:attempted-recon; sid:200027694; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.70.19.11?key=pcah4,email=email@icloud.com&post=58184_1&cc_key",nocase; classtype:attempted-recon; sid:200027695; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.74.246.12?key=1g3zv,email=email@icloud.com&post=71118_1&cc_key",nocase; classtype:attempted-recon; sid:200027696; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.74.246.12?key=7opkq,email=dylanmarilyn@icloud.com&post=19298_1&cc_key",nocase; classtype:attempted-recon; sid:200027697; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.74.246.12?key=bs0x8,email=email@icloud.com&post=97474_1&cc_key",nocase; classtype:attempted-recon; sid:200027698; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.74.246.12?key=dtruh,email=email@icloud.com&post=48614_1&cc_key",nocase; classtype:attempted-recon; sid:200027699; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.74.246.12?key=m4rhr,email=email@icloud.com&post=09923_1&cc_key",nocase; classtype:attempted-recon; sid:200027700; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.77.66.21?key=nc14b,email=ebynum84@icloud.com&post=99099_1&cc_key",nocase; classtype:attempted-recon; sid:200027701; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.91.205.251?key=dlykh,email=samantha.adams76@icloud.com&post=04213_1&cc_key",nocase; classtype:attempted-recon; sid:200027702; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.91.205.251?key=eaw8f,email==email@icloud.com&post=12213_1&cc_key",nocase; classtype:attempted-recon; sid:200027703; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.91.205.251?key=pj3yz,email=email@icloud.com&post=67421_1&cc_key",nocase; classtype:attempted-recon; sid:200027704; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://40.117.61.134/index.html?key=oppca,email=trackfinance@irs.gov&post=63156_1&cc_key",nocase; classtype:attempted-recon; sid:200027705; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://40.77.6.54?key=oppca",nocase; classtype:attempted-recon; sid:200027706; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://40.82.145.107?key=nr1yf,email=nccollis@icloud.com&post=15853_1&cc_key",nocase; classtype:attempted-recon; sid:200027707; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://40.87.142.94?key=mgpnmfsjjt",nocase; classtype:attempted-recon; sid:200027708; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://51.12.50.209?key=vkmgm,email=samyafinley@icloud.com&post=27530_1&cc_key",nocase; classtype:attempted-recon; sid:200027709; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://52.14.205.198?key=qu11c",nocase; classtype:attempted-recon; sid:200027710; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://52.179.20.96?key=8s5yy,email=jhnpaul@icloud.com&post=99298_1&cc_key",nocase; classtype:attempted-recon; sid:200027711; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://52.179.20.96?key=pjway,email=tkey8@icloud.com&post=45230_1&cc_key",nocase; classtype:attempted-recon; sid:200027712; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fartesvladshiola.com%2f.well-known%2fpki-validation%2fsondu%2fkomuter&post=696668869_33&cc_key",nocase; classtype:attempted-recon; sid:200027713; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fbsa-liepaja.lv%2fimages%2fdocuments%2fmake%2fson&post=696668869_25&cc_key=/?idasjdaisd",nocase; classtype:attempted-recon; sid:200027714; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fcarinsurancequotetoday.com%2fwp-includes%2fsodium_compat%2fnamespaced%2fcor&post=696668869_16&cc_key=/?axnbyspd-brjusp18076006",nocase; classtype:attempted-recon; sid:200027715; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fcarinsurancequotetoday.com%2fwp-includes%2fsodium_compat%2fnamespaced%2fcor&post=696668869_16&cc_key=/?efhooiun-brjusp89207915",nocase; classtype:attempted-recon; sid:200027716; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fedelwiral.info%2fwp-includes%2fsodium_compat%2fnamespaced%2fcore%2fcurve25519%2fgose&post=696668869_17&cc_key=/?xjxiixmi-suirs70143986",nocase; classtype:attempted-recon; sid:200027717; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2femtowersgroup.com%2fwp-admin%2fimages%2fgrak%2fsus&post=696668869_19&cc_key=/?uccxgwww-kampo32395997",nocase; classtype:attempted-recon; sid:200027718; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fmsq-health.com%2fimages%2fonehealth%2fsound%2faudio&post=696668869_2&cc_key=/hwrgpnzn/tmkmvvztsvg",nocase; classtype:attempted-recon; sid:200027719; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fmsq-health.com%2fimages%2fonehealth%2fsound%2faudio&post=696668869_2&cc_key=/odmibxru/tsiqjhleqcj",nocase; classtype:attempted-recon; sid:200027720; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2frdx-irsfederal.com%2findex.html&post=710109641_5",nocase; classtype:attempted-recon; sid:200027721; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2ftempt.lk%2fhosr&post=696668869_21&cc_key=/?hbijqrvf-mom71222564",nocase; classtype:attempted-recon; sid:200027722; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fwolffun.net%2fwp-includes%2fwidgets%2fxloa%2fclose%2f&post=696668869_14&cc_key=/?xoxlosml-usa34359382",nocase; classtype:attempted-recon; sid:200027723; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://amrutimba.com/css/api.php?key={random_letternumberuplow_5},email={email}&post={random_number_5}_1&cc_key",nocase; classtype:attempted-recon; sid:200027724; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://bodycare.co.za/addtlz/api.html?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027725; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://dashtipour.com/wp-content/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027726; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://efecsos.com/wp-content/acay-baru.php?key={random_letternumberuplow_5},email={email}&post={random_number_5}_1&cc_key",nocase; classtype:attempted-recon; sid:200027727; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://efecsos.com/wp-content/acayganteng88.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027728; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://efecsos.com/wp-content/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027729; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://forextradingtruth.com/wp-includes/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027730; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://gociate.com/wp-admin/css/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027731; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://gociate.com/wp-content/acayganz.html?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027732; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://hayvanatbahcesi.net/wp-admin/includes/api.html?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027733; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://leviathandesign.com.au/assets/img/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027734; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://leviathandesign.com.au/assets/include/apiacy.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027735; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://naturesbuffet.co.in/api-lrsbaru.html?key={random_letternumberuplow_5},email={email}&post={random_number_5}_1&cc_key",nocase; classtype:attempted-recon; sid:200027736; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://newsaya.com/wp-includes/css/apiwixxx.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027737; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=b2tiu,email=email@email.com&post=13135_1&cc_key",nocase; classtype:attempted-recon; sid:200027738; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=jhtuf,email=email@email.com&post=05998_1&cc_key",nocase; classtype:attempted-recon; sid:200027739; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=jhtuf,email=maxwellseard@icloud.com&post=05998_1&cc_key",nocase; classtype:attempted-recon; sid:200027740; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=p2znu,email=carlosg918@icloud.com&post=87241_1&cc_key",nocase; classtype:attempted-recon; sid:200027741; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=p2znu,email=email@email.com&post=87241_1&cc_key",nocase; classtype:attempted-recon; sid:200027742; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=qrcv6,email=email@email.com&post=91315_1&cc_key",nocase; classtype:attempted-recon; sid:200027743; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=uocle,email=email@email.com&post=58150_1&cc_key",nocase; classtype:attempted-recon; sid:200027744; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=xnxyp,email=email@email.com&post=84575_1&cc_key",nocase; classtype:attempted-recon; sid:200027745; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-usaprofilefederal.com?key=nfhjn,email=email@email.com&post=47493_1&cc_key",nocase; classtype:attempted-recon; sid:200027746; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-usaprofilefederal.com?key=zza21,email=email@email.com&post=39704_1&cc_key",nocase; classtype:attempted-recon; sid:200027747; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://twitter.com?w5htjopplcko0cun0kky&cc_key=?trackingid=o9xc3cyu&signature=newsletter",nocase; classtype:attempted-recon; sid:200027748; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://wpcdecor.com/wp-includes/acy-ling.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027749; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.agilefunds.net/wp-includes/assets/api.html?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027750; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.ciudadanoseguro.cl/wp-admin/css/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027751; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.ciudadanoseguro.cl/wp-content/themes/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027752; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.marmum.ae/css/?key=yihv",nocase; classtype:attempted-recon; sid:200027753; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.mathelin-teinture-tissus.com/assets/include/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027754; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.newlifenursery.com/assets/rdt.html?key=lwhi1",nocase; classtype:attempted-recon; sid:200027755; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.pawcz.cn/wp-includes/css/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027756; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.pawcz.cn/wp-includes/js/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027757; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.thaitheparos.com/assets/css/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027758; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://yavuzhanotel.com/wp-content/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200027759; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallieget.com",nocase; http_uri; content:"/8jdu/sb6/index.php?_&amp\;_",nocase; classtype:attempted-recon; sid:200027760; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallieget.com",nocase; http_uri; content:"/8jdu/sb6/index.php?_&amp\;_&amp\;_",nocase; classtype:attempted-recon; sid:200027761; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"warriorplus.com",nocase; http_uri; content:"/o2/a/f5s4y/0",nocase; classtype:attempted-recon; sid:200027762; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webuyworkshopequipment.com",nocase; http_uri; content:"/wp-content/themes/sketch/js/sf_trash/c45b222914e3c78d/",nocase; classtype:attempted-recon; sid:200027763; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weitzmedicalmanagement.com",nocase; http_uri; content:"/wp-content//pronto/elect/swisss/swiss/",nocase; classtype:attempted-recon; sid:200027764; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wen.org.cn",nocase; http_uri; content:"/modules/links/redirect.php?url=https://siasky.net/xafdablievokd6wlyokc5qzdvkunqt4gpk3flhjbcpwhog",nocase; classtype:attempted-recon; sid:200027765; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weps.org",nocase; http_uri; content:"/company/banco-original",nocase; classtype:attempted-recon; sid:200027766; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"windinmyhair.me",nocase; http_uri; content:"/new/content/",nocase; classtype:attempted-recon; sid:200027767; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_home",nocase; classtype:attempted-recon; sid:200027768; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_internet",nocase; classtype:attempted-recon; sid:200027769; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_service_alert.",nocase; classtype:attempted-recon; sid:200027770; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_teem",nocase; classtype:attempted-recon; sid:200027771; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_update",nocase; classtype:attempted-recon; sid:200027772; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_upgrade",nocase; classtype:attempted-recon; sid:200027773; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@btinternet",nocase; classtype:attempted-recon; sid:200027774; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wlo.link",nocase; http_uri; content:"/@yahoo2022",nocase; classtype:attempted-recon; sid:200027775; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wow.link",nocase; http_uri; content:"/testing02",nocase; classtype:attempted-recon; sid:200027776; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yamboro.com",nocase; http_uri; content:"/add/bibaztgkmv4111/",nocase; classtype:attempted-recon; sid:200027777; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yamboro.com",nocase; http_uri; content:"/add/bibaztgkmv4727/",nocase; classtype:attempted-recon; sid:200027778; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ylx.xbt.mybluehost.me",nocase; http_uri; content:"/bnz/digitalprelogonauthentication/prelogon/authentication/personal.html",nocase; classtype:attempted-recon; sid:200027779; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zi0034034323.web.app",nocase; http_uri; content:"/#test@test.com",nocase; classtype:attempted-recon; sid:200027780; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zimbra03999323.fra1.digitaloceanspaces.com",nocase; http_uri; content:"/index.html#a@b.com",nocase; classtype:attempted-recon; sid:200027781; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zoho.com",nocase; http_uri; content:"/forms/?serviceurl=/qudustemitope455/form/signinyourbtaccountcorrectly/share",nocase; classtype:attempted-recon; sid:200027782; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zpr.io",nocase; http_uri; content:"/efrrqedv9fec#michael@.yorku.ca",nocase; classtype:attempted-recon; sid:200027783; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zpr.io",nocase; http_uri; content:"/kms8u47zlxwk",nocase; classtype:attempted-recon; sid:200027784; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zpr.io",nocase; http_uri; content:"/mxvzwlcdizyq",nocase; classtype:attempted-recon; sid:200027785; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zpr.io",nocase; http_uri; content:"/nckeqquhrpuf",nocase; classtype:attempted-recon; sid:200027786; rev:1;)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zpr.io",nocase; http_uri; content:"/uyydv5mqujps",nocase; classtype:attempted-recon; sid:200027787; rev:1;)